← Library
kqlElastic-2.0from elastic/detection-rules

Zoom Meeting with no Passcode

Quality
92
FP risk
—
Forks
0
Views
0
ATT&CK techniques
T1133T1190
Rule sourcerules/cross-platform/initial_access_zoom_meeting_with_no_passcode.toml
event.type:creation and event.module:zoom and data_stream.dataset:zoom.webhook and
  event.action:meeting.created and not zoom.meeting.password:*