@@ -17,10 +17,26 @@ function Invoke-PublicPhishingCheck {
1717 if ($Request.body.Cloned -and $Tenant.customerId -eq $Request.body.TenantId ) {
1818 Write-AlertMessage - message $Request.body.AlertMessage - sev ' Alert' - tenant $Request.body.TenantId
1919 } elseif ($Request.Body.source -and $Tenant ) {
20+ $table = Get-CIPPTable - tablename CheckExtensionAlerts
2021 $Message = " Alert received from $ ( $Request.Body.source ) for $ ( $Request.body.TenantId ) "
21- Write-Information ($Request.Body | ConvertTo-Json )
22- Write-AlertTrace - cmdletName ' CheckExtentionAlert' - tenantFilter $Tenant - data $Request.body
23- Write-AlertMessage - message $Message - sev ' Alert' - tenant $Tenant.customerId - LogData $Request.body
22+ $ID = (New-Guid ).GUID
23+ $TableBody = @ {
24+ RowKey = " $ID "
25+ PartitionKey = [string ]$Tenant.defaultDomainName
26+ message = [string ]$Message
27+ type = [string ]$request.body.type
28+ url = [string ]$request.body.url
29+ reason = [string ]$request.body.reason
30+ score = [string ]$request.body.score
31+ threshold = [string ]$request.body.threshold
32+ potentialUserName = [string ]$request.body.userEmail
33+ potentialUserDisplayName = [string ]$request.body.userDisplayName
34+ reportedByIP = [string ]$Request.headers .' x-forwarded-for'
35+ rawBody = " $ ( $Request.body | ConvertTo-Json ) "
36+ }
37+ $null = Add-CIPPAzDataTableEntity @table - Entity $TableBody - Force
38+ Write-AlertTrace - cmdletName ' CheckExtentionAlert' - tenantFilter $Tenant.defaultDomainName - data $TableBody
39+ # Write-AlertMessage -message $Message -sev 'Alert' -tenant $Tenant.customerId -LogData $Request.body
2440 }
2541
2642 # Associate values to output bindings by calling 'Push-OutputBinding'.
0 commit comments