MSDefenderOffice365

MSDefenderOffice365_SafeLinksDecoder.json

Author: Louis HUSSON
License: AGPL-V3
Version: 1.0
Supported observables types:
- url
Registration required: False
Subscription required: False
Free subscription: True
Third party service: N/A

Description

Decodes Office 365 ATP Safe Links to extract original URLs. Supports url observables containing safelinks.protection.outlook.com domains.

Configuration

No specific configuration required.

Templates samples for TheHive

No template samples to display.