Welcome

The Microsoft Security Response Center (MSRC) provides a programmatic API to enable automated reporting of abuse or attacks originating from Microsoft online services. The MSRC Abuse Reporting Portal provides a graphical user interface ideal and additional documentation.

https://api.msrc.microsoft.com/report/v2.0/abuse

This repository contains code samples demonstrating how you could use the MSRC Abuse Reporting API to report suspected cyberattacks or abuse originating from Microsoft Online Services, such as Microsoft Azure, Bing, Outlook, OneDrive, Office 365, etc. This includes malicious network activity originating from a Microsoft IP addresses. It also includes distribution of malicious content or other illicit or illegal material through a Microsoft Online Service.

View data model and API documentation at msrc.microsoft.com/report/developer.

Change Log

2021-02-19: update to new Abuse API and remove obsolete documentation 2021-02-18: point to new interactive Developer documentation page, removed deprecated Pentest API

Contributing

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

It is Microsoft’s mission to empower every person and every organization on the planet to achieve more. We thank you for helping shape that future by making the world a more secure place, and we welcome your feedback on features to add or bugs to fix.