Detection of Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials

Detection of advanced email-based phishing campaigns targeting users, leveraging multiple evasion techniques including: Multiple-layer link wrapping using trusted redirectors (e.g., Proofpoint, url.emailprotection, Bitly) Malicious SVG attachments Phishing lures in subject lines Redirect chains via links to credential harvesting pages

Microsoft Sentinel (KQL)