Malicious Verdicts in Microsoft Teams Messages

Pierre Thoor@pthoor

•updated Mar 26, 2026•8•1•150

This rule detects messages within Microsoft Teams that have been identified by Microsoft Defender for Office 365 as containing phishing attempts, malware, or spam. It specifically looks for messages with 'Phish', 'Malware', or 'Spam' verdicts in the ThreatTypes field, allowing for quick identification and triage of malicious content.