pC_microsofto365jsonalerttriggerthreatmanagement.md

Parser Content

{
Name = microsoft-o365-json-alert-trigger-threatmanagement
  Product = Microsoft 365
  Conditions = [ """""category"":""ThreatManagement"""", """"title"":""""", """"vendor"":""Microsoft"""", """"provider"":""Office 365 Security and Compliance"""" ]
  DupFields = [ "alert_name->alert_subject", "domain->top_domain" ]
  ParserVersion = v1.0.0


}