Detection rules › By eventM365-SharePointSearchEventRulesSearchQueryInitiatedSharePoint1SearchQueryInitiatedSharePoint#1 detection rules reference this event. View event page.Splunk (1)O365 SharePoint Suspicious Search Behavior severity low T1213,T1213.002,T1552