Detecting Bulk Sensitive File Activity with Microsoft Defender and Microsoft Sentinel Summary Rules

This post walks through a practical way to catch a process touching an unusually large number of labeled, sensitive files in a short window…