Microsoft Teams Channel
  • 1 Minute to read
  • Contributors
  • Dark
    Light
  • PDF

Microsoft Teams Channel

  • Dark
    Light
  • PDF

Microsoft Teams is a collaborative workspace within Microsoft 365/Office 365 that is used for workplace conversations.

Configuration

  1. In the Configuration Box, enter the Configuration Name to uniquely identify this configuration.
  2. Create a webhook for a Microsoft Teams channel in your account.
  3. Identify the content of headers and payload that you need to provide in the Configuration Box.

Below is an example on how you can leverage this integration to send alerts to your Microsoft Teams Channel.

Payload

{
   "text":"Alert from DNIF - Found Suspicious Remote Desktop Activity on host $DstIP"
}

image.png

MS Team, delivers text mentioned in the Payload to your MS Teams channel.

image.png

In the above figure, a workbook named Suspicious Remote Desktop Network Activity is executed which contains the following blocks:

  • SQL Block: Displays two suspicious Destination IPs on execution of the workbook
  • Signal Block: This will raise a signal on detecting the suspicious IPs.
  • DQL block with _trigger query: Using Webhook integration for Microsoft Teams Channel, an alert will be raised to the teams channel with the message mentioned in payload as displayed below:

image.png


Was this article helpful?

What's Next