MS Teams Threat Intelligence Indicator Hit for Domain or URL

Benjamin Zulliger@benscha

•updated Dec 1, 2025•80•2•594

This rule detects when a domain or URL observed in Teams Messages matches a known threat intelligence indicator from Microsoft Defender Threat Intelligence. It specifically looks for hits against 'Domain' and 'URL' type indicators.