Skip to main content

A New Qiita Article: Investigating Phishing Campaigns with Defender XDR and Sentinel

· One min read
James Yip
James Yip

Eventus published a Qiita article, “Shifting Phishing Investigations from a Single Email to a Campaign: Scoping Impact with Defender XDR and Sentinel”. The Japanese title is 「フィッシング調査を『1通のメール』から『キャンペーン単位』に切り替える―Defender XDRとSentinelで影響範囲を出す」.

The article shows how CampaignInfo, EmailEvents, UrlClickEvents, and Sentinel imAuthentication data can help scope campaign recipients, URL clicks, and post-click sign-ins. It also covers practical SIEM+ triage for moving from campaign signals to a clear view of potential impact.

Read the article​

If you investigate phishing campaigns and need to understand their reach, read the Defender XDR and Sentinel phishing investigation article on Qiita.

Contact Eventus to discuss practical SIEM+ investigation and triage.