Rules Overview
Beacon includes 44 detection rules across 9 categories.
| Category | Rules | Description |
|---|---|---|
| Applications | 3 | OAuth apps, service principals, and app registrations |
| Client Specific | 1 | Tenant-specific rule templates |
| Compliance | 2 | DLP policies, audit logging, and compliance settings |
| eDiscovery | 1 | eDiscovery searches and exports |
| Exchange | 11 | Inbox rules, mail flow, and Exchange Online security |
| Identity | 6 | Admin roles, MFA, conditional access, and federation |
| Security Alerts | 9 | Microsoft Defender security alerts |
| Sharepoint | 2 | SharePoint and OneDrive file sharing |
| Sign In | 9 | Sign-in risk detections and anomalies |