This playbook handles the tagging of Office365 indicators. Specify the tag to apply to these indicators in the playbook inputs. An example tag will be approved_white. If no inputs are specified, the indicators will be tagged for manual review. The user can specify whether a manual review incident is required.
Office 365 Feed
- Details
- Content
- Dependencies
- Version History
- Download With Dependencies
The Office 365 IP Address and URL web service is a read-only API provided by Microsoft to expose the URLs and IPs used by Office 365. The Office 365 Feed integration fetches indicators from the service, with which you can create a list (whitelist, blacklist, EDL, etc.) for your SIEM or firewall service to ingest and apply to its policy rules.
PUBLISHER
Cortex XSOAR
INFO
Certification | Certified | Read more |
Supported By | Cortex XSOAR | |
Created | July 19, 2020 | |
Last Release | May 11, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.Playbooks
Integrations
Required Content Packs (4)
Optional Content Packs (0)
1.1.19 - 2902879 (May 11, 2022)
1.1.18 - 2791426 (April 20, 2022)
1.1.17 - 2600387 (March 17, 2022)
1.1.16 - 2507216 (March 3, 2022)
1.1.15 - 2303329 (January 25, 2022)
1.1.14 - 2201332 (January 4, 2022)
1.1.13 - R2146019 (December 21, 2021)
1.1.12 - 1959372 (November 16, 2021)
1.1.11 - 7844526 (September 29, 2021)
1.1.10 - 7640590 (September 16, 2021)
1.1.9 - 7423160 (September 2, 2021)
1.1.8 - 399371 (July 18, 2021)
1.1.7 - 387494 (June 21, 2021)
1.1.6 - 378296 (June 6, 2021)
1.1.5 - R264879 (November 9, 2020)
1.1.4 - 82382 (August 5, 2020)
1.1.3 - 68579 (July 19, 2020)