New MS DMARC aggregation reports not processed - Githubissues

aholzel / TA-dmarc

Splunk app for the processing and ingestion of DMARC RUA reports

4 stars 2 forks source link

New MS DMARC aggregation reports not processed #8

Closed jbouwh closed 2 years ago

jbouwh commented 2 years ago

Microsoft started sending aggregation reports with sibjects like: [Preview] Report Domain: example.com Submitter: protection.outlook.com Report-ID: 9ab4470a418d4e94ba721daea59xxxxx

The prefix [Preview] causes these reports not to be processed.

aholzel commented 2 years ago

Thanks for reporting! Good to see that microsoft is finally sending out reports... I fixed this in version 4.0.1