search

thinkst / opencanary

Modular and decentralised honeypot
http://opencanary.org
BSD 3-Clause "New" or "Revised" License
2.28k stars 356 forks source link

MS Teams webhooks #361

Closed cipisek9 closed 1 month ago

cipisek9 commented 1 month ago

Hi, as you know, Microsoft will no longer support webhooks through Office 365 connectors starting August 15th (source: Retirement of Office 365 Connectors within Microsoft Teams).

Has anyone tried setting it up using workflows as mentioned in the article above? I attempted to use the provided schema, but unfortunately, the received message in the channel is empty.

{ "type": "object", "properties": { "dst_host": { "type": "string" }, "dst_port": { "type": "integer" }, "local_time": { "type": "string" }, "local_time_adjusted": { "type": "string" }, "logdata": { "type": "object", "properties": { "msg": { "type": "object", "properties": { "logdata": { "type": "string" } } } } }, "logtype": { "type": "integer" }, "node_id": { "type": "string" }, "src_host": { "type": "string" }, "src_port": { "type": "integer" }, "utc_time": { "type": "string" } } }

Screenshot 2024-07-16 at 14 42 27

Thank you in advance.

thinkst-az commented 1 month ago

Thanks @cipisek9. We're working on updating all our MS Teams integrations and this one is one the list too. The old MS Team webhook won't work as you rightly point it requires a specific format.