VIEW RULE IN DATADOG VIEW SIGNALS

WARNING: This rule is being deprecated on 15 July 2024.

Goal

Detect when a user installs an app to Microsoft 365 Teams.

Strategy

This rule monitors the Microsoft 365 logs for the event name AppInstalled.

Triage and response

Determine whether this app should be installed to Microsoft 365 teams.