Microsoft 365 SharePoint object shared with guest
Incident Management is now generally available! Incident Management is now generally available!
<  Back to rules search

Microsoft 365 SharePoint object shared with guest

microsoft-365

Set up the microsoft-365 integration.

Overview

Goal

Detect when a user shares a Microsoft 365 Sharepoint document with a guest.

Strategy

This rule monitors the Microsoft 365 logs for the event name SharingInvitationCreated when the TargetUserOrGroupType is Guest.

Triage & Response

  1. Determine whether this document should be shared with the external user.