Skip to content

Update credential_phishing_esign_document_notification.yml#4493

Closed
JFarina5 wants to merge 1 commit into
mainfrom
JFarina5.FN.ESC-13539.cred.phish.esign
Closed

Update credential_phishing_esign_document_notification.yml#4493
JFarina5 wants to merge 1 commit into
mainfrom
JFarina5.FN.ESC-13539.cred.phish.esign

Conversation

@JFarina5
Copy link
Copy Markdown
Member

Description

Updating subject/sender.display_name keywords to match on additional samples

Associated samples

Associated hunts

@JFarina5 JFarina5 requested a review from a team May 15, 2026 15:33
@JFarina5 JFarina5 requested a review from a team as a code owner May 15, 2026 15:33
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label May 15, 2026
github-actions Bot added a commit that referenced this pull request May 15, 2026
github-actions Bot added a commit that referenced this pull request May 15, 2026
…g: Suspicious e-sign agreement document notification
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request May 15, 2026
…ng: Suspicious e-sign agreement document notification
@JFarina5
Copy link
Copy Markdown
Member Author

This rule doesn't seem to be the best fit for this sample. Closing this PR in favor of #4506

@JFarina5 JFarina5 closed this May 19, 2026
github-actions Bot added a commit that referenced this pull request May 19, 2026
github-actions Bot added a commit that referenced this pull request May 19, 2026
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant