- AR3
- -PR018
- -PR018.007
Downgrading Microsoft Information Protection (MIP) labels - AR3
Contributor: Lawrence Rake @ Lead Proactive Insider Risk Detection Engineer - Subsection PR018.007
- AR4
- -IF004
- -IF004.006
Exfiltration via Python Listening Service - AR4
Contributor: Lawrence Rake @ Lead Proactive Insider Risk Detection Engineer - Subsection IF004.006