Pastebin URL Shared in Microsoft Teams Message
Detects Microsoft Teams messages containing links to Pastebin. Threat actors (e.g., Nimbus RAT operators) use Pastebin to host instruction checklists and payload URLs during vishing attacks.
Microsoft Sentinel (KQL)
