Microsoft Teams Senders Triggering URL Safety Tips

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


This query lists the Microsoft Teams senders whose messages most often triggered a URL safety-tip warning, with each sender's warning rate.

Attribute Value
Type Hunting Query
Solution Microsoft Defender XDR
ID 23a9ae26-cede-4e3b-8cf0-0d0da7a6930a
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source View on GitHub

⚠️ Not listed in Solution JSON: This content item was discovered by scanning the solution folder but is not included in the official Solution JSON file. It may be a legacy item, under development, or excluded from the official solution package.

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
MessageEvents SafetyTip == "URLMessageWarning" ✓ ✗ ✓

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Hunting Queries · Back to Microsoft Defender XDR