O365 Safe Links Alert Detection

This analytic detects when Microsoft Safe Links triggers an alert. This behavior indicates that a user has interacted with a phishing or otherwise malicious link within the Microsoft Office ecosystem, and Safe Links has taken action (allowed or blocked) against it.