Analyzers (1)
MSDefenderOffice365 SafeLinksDecoder.json v1.0
Decodes Office 365 ATP Safe Links to extract original URLs. Supports url observables containing safelinks.protection.outlook.com domains.
- Author: Louis HUSSON
- License: AGPL-V3
- Data Types:
url
Responders (4)
MSDefenderOffice365 allow v1.0
Add entries to the Tenant Allow/Block List in the Microsoft 365 Defender
- Author: Vito Piserchia
- License: AGPL-V3
- Data Types:
thehive:case_artifact
MSDefenderOffice365 block v1.0
Add entries to the Tenant Allow/Block List in the Microsoft 365 Defender
- Author: Joe Lazaro
- License: AGPL-V3
- Data Types:
thehive:case_artifact
MSDefenderOffice365 unblock v1.0
Add entries to the Tenant Allow/Block List in the Microsoft 365 Defender
- Author: Joe Lazaro
- License: AGPL-V3
- Data Types:
thehive:case_artifact
MSDefenderOffice365 disallow v1.0
Add entries to the Tenant Allow/Block List in the Microsoft 365 Defender
- Author: Vito Piserchia
- License: AGPL-V3
- Data Types:
thehive:case_artifact
