MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #126 from elhoim/master 

Added domains using Azuredns-prd.info as Nameserver
pull/127/head
Andras Iklody 2020-01-13 12:46:39 +01:00 committed by GitHub
parent b13a6848b3 e5a5ac576b
commit bca59ec066
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 81 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

124
lists/microsoft/list.json
View File

@ -1,6 +1,6 @@
{
"name": "List of known microsoft domains",
"version": 2,
"version": 3,
"description": "Event contains one or more entries of known microsoft domains",
"matching_attributes": [
"domain",
@ -9,8 +9,6 @@
],
"type": "hostname",
"list": [
".files-df.1drv.com",
".files.1drv.com",
".aadrm.com",
".afx.ms",
".akadns.net",
@ -18,44 +16,37 @@
".azure-int.net",
".azure-mobile.net",
".azure.com",
".cloudapp.azure.com",
"azure.com",
".azure.net",
".cloudapp.azure.net",
".azureedge.net",
".azurewebsites.net",
".bing-exp.com",
".bing-int.com",
".bing.com",
"bing.com",
"download.cortana.cn.bing.com",
".bing.net",
".ceipmsn.com",
".cloudapp.azure.com",
".cloudapp.azure.net",
".cloudapp.net",
".codeplex.com",
".discoverbing.com",
".files-df.1drv.com",
".files.1drv.com",
".firstpartyapps.oaspapps.com",
".getmicrosoftkey.com",
".gfx-int.ms",
"gfx-int.ms",
".gfx.ms",
".healthvault-ppe.co.uk",
".healthvault-ppe.com",
"healthvault-ppe.com",
".healthvault.co.uk",
".healthvault.com",
".hotmail-int.com",
"hotmail.co.uk",
".hotmail.com",
"hotmail.com",
"iespdytst",
"ieta-wa-24",
".live-int.com",
".live-int.net",
".live-partner.com",
".live-ppe.net",
".live.com",
".live.fi",
"live.fi",
".live.net",
".livefilestore-int.com",
".livefilestore.com",
@ -65,15 +56,6 @@
".mgmt.live",
".microsoft-int.com",
".microsoft.com",
".redmond.corp.microsoft.com",
"download.microsoft.com",
"iespdytst.redmond.corp.microsoft.com",
"microsoft.com",
"powerusers-staging.microsoft.com",
"powerusers.microsoft.com",
"telecommand.telemetry.microsoft.com",
"vortex-sandbox.data.microsoft.com",
"watson.telemetry.microsoft.com",
".microsoft.com.au",
".microsoft.com.tr",
".microsoft.fr",
@ -85,16 +67,13 @@
".microsoftonline.net",
".microsoftprime.com",
".microsoftstore.com",
"za.microsoftstore.com",
".microsoftstore.com.br",
".microsoftstore.com.cn",
".microsoftstore.com.hk",
".microsofttranslator.com",
".microsoftvirtualacademy.com",
".modern.ie",
"modern.ie",
".msads.net",
".vo.msecnd.net",
".msgamestudios.com",
".msn-int.com",
".msn.cn",
@ -102,29 +81,19 @@
".msn.com",
".msn.com.cn",
".msocdn.com",
".firstpartyapps.oaspapps.com",
".office-int.com",
"office-int.com",
".office-int.net",
".office.com",
"office.com",
".office.net",
".office365.com",
".officeppe.com",
".officeppe.net",
".onedrive.com",
"onedrive.com",
".onenote.com",
"onenote.com",
".onenote.net",
"outlook-int.com",
".outlook.com",
"003-1-d.outlook.com",
"003-1-d.prod.outlook.com",
"outlook.com",
"pod71084-pri.outlook.com",
"pod71084.outlook.com",
".pfx.ms",
".redmond.corp.microsoft.com",
".s-microsoft.com",
".s-msft.com",
".s-msn.com",
@ -134,7 +103,6 @@
".sharepoint.com",
".sharepointonline.com",
".skype.com",
"community-stage.skype.com",
".skype.net",
".skypeassets.com",
".sqlazurelabs.com",
@ -143,11 +111,9 @@
".trouter.io",
".virtualearth.net",
".visualstudio.com",
"visualstudio.com",
".vo.msecnd.net",
".windows-int.net",
".windows.com",
"insidersurveys.windows.com",
"www.insidersurveys.windows.com",
".windows.net",
".windowsazure.com",
".windowsmedia.com",
@ -160,6 +126,78 @@
".wlxrs.com",
".xbox.com",
".xboxlive.com",
".zune.net"
".zune.net",
"003-1-d.outlook.com",
"003-1-d.prod.outlook.com",
"azdns-migration-ns-validation.cn",
"azure-api.net",
"azure-apim.net",
"azure-devices.net",
"azure-mobile.net",
"azure.com",
"azurebiganalytics.net",
"azuredatacatalog.com",
"azuredatalake.net",
"azuredatalakeanalytics.net",
"azuredatalakestore.net",
"azureedge.net",
"azurehdinsight-stage.net",
"azurehdinsight.net",
"azurewebsites.net",
"bing.com",
"cloudapp-int.net",
"cloudapp-preview.com",
"cloudapp-preview.net",
"cloudapp.net",
"clouddatahub.net",
"cloudwebappproxy.net",
"community-stage.skype.com",
"download.cortana.cn.bing.com",
"download.microsoft.com",
"gfx-int.ms",
"hdinsightservices.net",
"healthvault-ppe.com",
"homeserver.com",
"hotmail.co.uk",
"hotmail.com",
"iespdytst",
"iespdytst.redmond.corp.microsoft.com",
"ieta-wa-24",
"insidersurveys.windows.com",
"live.fi",
"management-azure-devices.net",
"mgmt-azure-api.net",
"microsoft.com",
"microsoftcrmportals.com",
"microsoftcrmportalstest.com",
"microsoftkonacompute.net",
"microsoftprojecttokyo.com",
"microsoftstream.com",
"modern.ie",
"msappproxy.net",
"o365apps.net",
"office-int.com",
"office.com",
"onedrive.com",
"onenote.com",
"outlook-int.com",
"outlook.com",
"pbiwebcontent.com",
"pod71084-pri.outlook.com",
"pod71084.outlook.com",
"powerbi.com",
"powerusers-staging.microsoft.com",
"powerusers.microsoft.com",
"remotewebaccess.com",
"stage-azurewebsites.net",
"stage-o365apps.net",
"telecommand.telemetry.microsoft.com",
"visualstudio.com",
"vortex-sandbox.data.microsoft.com",
"vsallin.net",
"vsassets.io",
"watson.telemetry.microsoft.com",
"www.insidersurveys.windows.com",
"za.microsoftstore.com"
]
}