Suspicious external Microsoft Teams message delivering a link (phishing lure)
Detects messages sent, chats created, or members added within Microsoft Teams that involve external participants and contain embedded HTTP or HTTPS links. This behavior is indicative of potential external spearphishing or malicious link distribution through collaborative chat platforms.
Microsoft Sentinel (KQL)
