MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [microsoft-attack-simulator] warning list about phishing campaign for "security awareness"

pull/79/head
Alexandre Dulaunoy 2018-07-11 08:33:28 +02:00
parent 1dde5442d9
commit d378c4e9ef
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
lists/microsoft-attack-simulator/list.json Normal file
View File

@ -0,0 +1,25 @@
{
"matching_attributes": [
"ip-src",
"ip-dst",
"domain|ip",
"hostname"
],
"version": 20180711,
"list": [
"52.168.52.134",
"securescore-user-prod.cloudapp.net",
"portal.docdeliveryapp.com",
"portal.hardwarecheck.net",
"portal.payrolltooling.com",
"portal.docdeliveryapp.net",
"portal.docstoreinternal.com",
"portal.prizesforall.com",
"portal.payrolltooling.net",
"portal.prizegiveaway.net",
"portal.hrsupportint.com"
],
"name": "List of known Office 365 Attack Simulator used for phishing awareness campaigns",
"description": "Office 365 URLs and IP address ranges used for their attack simulator in Office 365 Threat Intelligence",
"type": "substring"
}