Microsoft Safelinks
13 min
the microsoft safelinks connector allows for the decoding of protected urls and reporting on their safety, aiding in the protection against phishing and malware microsoft safelinks is a security feature within microsoft's suite of products that provides url scanning and rewriting to protect users from malicious links the microsoft safelinks connector for swimlane turbine allows users to decode safelinks urls to their original form and check their safety status this integration empowers security teams to quickly validate links, streamline threat analysis, and enhance their organization's email security posture directly within the swimlane turbine platform by automating these processes, users can efficiently manage and respond to potential threats, saving time and reducing the risk of human error prerequisites to effectively utilize the microsoft safelinks connector with swimlane turbine, ensure you have the following custom configuration with no additional parameters required capabilities the microsoft safelinks connector provides the following capabilities decode safelink urls report ms verdict configurations asset configuration parameters parameter description type required verify ssl verify ssl certificate boolean optional http proxy a proxy to route requests through string optional actions decode urls decodes microsoft safelinks urls provided in the data body to reveal the original url endpoint method get input argument name type required description data body object required data body data body urls string required urls from microsoft safelinks that need to be decoded input example {"data body" {"urls" "string"}} output parameter type description parsed urls array url endpoint for the request parsed domains array output field parsed domains status code number http status code of the response headers array http headers for the request headers file name string http headers for the request headers file string http headers for the request reason string response reason phrase output example {"parsed urls" \["https //google com","https //swimlane com"],"parsed domains" \["google com","swimlane com"],"status code" 200,"headers" \[],"reason" "ok"} report ms verdict reports the microsoft safelinks verdict on whether a link is allowed or blocked, requiring a data body input endpoint url / method get input argument name type required description data body object required data body data body url string required url to detect whether allowed or blocked input example {"data body" {"url" "https //example com/api/resource"}} output parameter type description resolved url string url endpoint for the request verdict string output field verdict status code number http status code of the response headers array http headers for the request headers file name string http headers for the request headers file string http headers for the request reason string response reason phrase output example {"resolved url" "http //joannawedding tw/info/us/open past due orders","verdict" "allowed","status code" 200,"headers" \[],"reason" "ok"} response headers header description example content type the media type of the resource application/json date the date and time at which the message was originated thu, 01 jan 2024 00 00 00 gmt