Playbook: MS Graph for Office 365 Message Identifier Activity Analysis

Accepts an internet message id, and asks Microsoft for a list of users with mailboxes to search, and then searches each one to look for records that have a matching internet message id. It then produces a normalized output and summary table.

Type: Investigation Date: 2024-02-03 Author: Lou Stella, Splunk ID: 5292d6ad-e9c4-4bfd-b831-928ac1dff816

MS Graph for Office 365

This input playbook requires the MS Graph for Office 365 connector to be configured.

Click the playbook screenshot to explore in more detail!

explore

source | version: 1