2018-07-11 08:33:28 +02:00
|
|
|
{
|
2020-04-03 13:37:17 +02:00
|
|
|
"description": "Office 365 URLs and IP address ranges used for their attack simulator in Office 365 Threat Intelligence",
|
2018-07-11 08:33:28 +02:00
|
|
|
"list": [
|
|
|
|
|
"52.168.52.134",
|
|
|
|
|
"portal.docdeliveryapp.com",
|
|
|
|
|
"portal.docdeliveryapp.net",
|
|
|
|
|
"portal.docstoreinternal.com",
|
2020-04-03 13:37:17 +02:00
|
|
|
"portal.hardwarecheck.net",
|
|
|
|
|
"portal.hrsupportint.com",
|
|
|
|
|
"portal.payrolltooling.com",
|
2018-07-11 08:33:28 +02:00
|
|
|
"portal.payrolltooling.net",
|
|
|
|
|
"portal.prizegiveaway.net",
|
2020-04-03 13:37:17 +02:00
|
|
|
"portal.prizesforall.com",
|
|
|
|
|
"securescore-user-prod.cloudapp.net"
|
|
|
|
|
],
|
|
|
|
|
"matching_attributes": [
|
|
|
|
|
"ip-src",
|
|
|
|
|
"ip-dst",
|
|
|
|
|
"domain",
|
|
|
|
|
"domain|ip",
|
|
|
|
|
"hostname"
|
2018-07-11 08:33:28 +02:00
|
|
|
],
|
|
|
|
|
"name": "List of known Office 365 Attack Simulator used for phishing awareness campaigns",
|
2020-04-03 13:37:17 +02:00
|
|
|
"type": "substring",
|
|
|
|
|
"version": 20180711
|
2018-07-11 08:33:28 +02:00
|
|
|
}
|
