Microsoft Teams webhook

Description

General

• Documentation: https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/connectors-using
• Summary: Microsoft Teams enables teams to communicate through instant messages and video conferences. The webhooks are a way for other applications to send messages in channels via a JSON payload to a specific URL. This detectors catches Outlook team private webhook urls.
• IPs allowlist: This feature is not available.
• Scopes: This feature is not available.

Revoke the secret

Webhook URL can be revoked via the channel settings in the developer dashboard.

Check for suspicious activity

This feature is not available.

Details for Outlook team webhook

• Family: Api

• Category: Messaging system

• Company: Microsoft

• High recall: True

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.11

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - https://outlook\.office(365)?\.com/webhook/

Examples

- text: 'webhook : https://outlook.office.com/webhook/6ee4efaa-986e-4b8e-8d6b-cca47c84f4a2@87ba1f9a-44cd-43a6-b008-6fdb45a5204e/TravisCI/9ad1eb07cda7411db33e74c3d676774e/0ad415e3-d66a-425c-9914-e9e52f2b81e1'
  apikey: https://outlook.office.com/webhook/6ee4efaa-986e-4b8e-8d6b-cca47c84f4a2@87ba1f9a-44cd-43a6-b008-6fdb45a5204e/TravisCI/9ad1eb07cda7411db33e74c3d676774e/0ad415e3-d66a-425c-9914-e9e52f2b81e1
- text: 'webhook : https://outlook.office365.com/webhook/991dcf74-cfb2-ec12-20e3-2bf45e467295@40227d90-b4e4-cdbf-2190-3062467ae235/MyIncomingWebhook/0e2a9cf6b9f03d11e75a8f366f603fd5/3d9aff9a-8d9e-33e8-0b66-e0ede63c9e6c'
  apikey: 'https://outlook.office365.com/webhook/991dcf74-cfb2-ec12-20e3-2bf45e467295@40227d90-b4e4-cdbf-2190-3062467ae235/MyIncomingWebhook/0e2a9cf6b9f03d11e75a8f366f603fd5/3d9aff9a-8d9e-33e8-0b66-e0ede63c9e6c'

Details for Ms teams webhook

• Family: Api

• Category: Messaging system

• Company: Microsoft

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 5.55

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - \.webhook\.office\.com/webhookb2/

Examples

- text: 'webhook : https://fabulousinc.webhook.office.com/webhookb2/6ee4efaa-986e-4b8e-8d6b-ccf77c29e0b0@87ba1f9a-44cd-43a6-b008-6fdb45a5204e/TravisCI/9ad1eb07cda7411db33e74c3d676774e/0ad415e3-d66a-425c-9914-e9e52f2b81e1'
  apikey: https://fabulousinc.webhook.office.com/webhookb2/6ee4efaa-986e-4b8e-8d6b-ccf77c29e0b0@87ba1f9a-44cd-43a6-b008-6fdb45a5204e/TravisCI/9ad1eb07cda7411db33e74c3d676774e/0ad415e3-d66a-425c-9914-e9e52f2b81e1