Microsoft Safelinks
12 min
the microsoft safelinks connector allows for the decoding of protected urls and reporting on their safety, aiding in the protection against phishing and malware microsoft safelinks is a security feature within microsoft's suite of products that provides url scanning and rewriting to protect users from malicious links the microsoft safelinks connector for swimlane turbine allows users to decode safelinks urls to their original form and check their safety status this integration empowers security teams to quickly validate links, streamline threat analysis, and enhance their organization's email security posture directly within the swimlane turbine platform by automating these processes, users can efficiently manage and respond to potential threats, saving time and reducing the risk of human error prerequisites to effectively utilize the microsoft safelinks connector with swimlane turbine, ensure you have the following custom configuration with no additional parameters required capabilities the microsoft safelinks connector provides the following capabilities decode safelink urls report ms verdict configurations asset configuration parameters parameter description type required verify ssl verify ssl certificate boolean optional http proxy a proxy to route requests through string optional actions decode urls decodes microsoft safelinks urls provided in the data body to reveal the original url endpoint method get input argument name type required description data body object required data body urls string required urls from microsoft safelinks that need to be decoded output parameter type description parsed urls array url endpoint for the request parsed domains array output field parsed domains status code number http status code of the response headers array http headers for the request file name string name of the resource file string output field file reason string response reason phrase example \[ { "parsed urls" \[ "https //google com", "https //swimlane com" ], "parsed domains" \[ "google com", "swimlane com" ], "status code" 200, "headers" \[], "reason" "ok" } ] report ms verdict reports the microsoft safelinks verdict on whether a link is allowed or blocked, requiring a data body input endpoint url / method get input argument name type required description data body object required data body url string required url to detect whether allowed or blocked output parameter type description resolved url string url endpoint for the request verdict string output field verdict status code number http status code of the response headers array http headers for the request file name string name of the resource file string output field file reason string response reason phrase example \[ { "resolved url" "http //joannawedding tw/info/us/open past due orders", "verdict" "allowed", "status code" 200, "headers" \[], "reason" "ok" } ]