file-sharing_microsoft-onedrive

Explanation

This NDM detects file sharing on the network using Microsoft OneDrive.

What to Look For

When examining the results of this NDM Event, look for any unauthorized file-sharing activity using Microsoft OneDrive. Check network logs for unusual or suspicious activity related to OneDrive file sharing. Additionally, investigate endpoints and ensure that OneDrive is not being used to share sensitive or confidential information outside of the organization.