01
detectionlint / library / spl

O365 Safe Links Detection

splApache-2.0from splunk/security_content

The following analytic detects when any Microsoft Safe Links alerting is triggered. This behavior may indicate when user has interacted with a phishing or otherwise malicious link within the Microsoft Office ecosystem.

02
quality59
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in