Skip to content

MSDefenderOffice365#

MSDefenderOffice365_SafeLinksDecoder.json#

Author: Louis HUSSON
License: AGPL-V3
Version: 1.0
Supported observables types:
- url
Registration required: False
Subscription required: False
Free subscription: True
Third party service: https://www.microsoft.com/en-us/microsoft-365/security/office-365-defender

Description#

Decodes Office 365 ATP Safe Links to extract original URLs. Supports url observables containing safelinks.protection.outlook.com domains.

Configuration#

No specific configuration required.

Templates samples for TheHive#

No template samples to display.