Suspicious Teams Application Related ObjectAcess Event — Detection Rule

Detects an access to authentication tokens and accounts of Microsoft Teams desktop application.

Read the full analysis on IntelFusions