Rules Overview
Beacon includes 41 detection rules across 7 categories.
| Category | Rules | Description |
|---|---|---|
| Applications | 3 | OAuth apps, service principals, and app registrations |
| Client Specific | 1 | Tenant-specific rule templates |
| Exchange | 14 | Inbox rules, mail flow, and Exchange Online security |
| Identity | 6 | Admin roles, MFA, conditional access, and federation |
| Purview | 6 | DLP policies, audit logging, and compliance settings |
| SharePoint | 2 | SharePoint and OneDrive file sharing |
| Sign In | 9 | Sign-in risk detections and anomalies |