Vault SOC
Incidents
MDO-1176MediumResolvedTrue Positive89%

Credential phishing link clicked – Safe Links blocked

Affected: t.brooksDefender for Office 365Updated 00:40 PT · Owner AI SOC

AI summary

Safe Links time-of-click block. No credential submission observed in Entra sign-in logs.

Verdict

True Positive89%

Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.