Skip to content

Create headers_x_source_auth_sender_mismatch.yml#4497

Open
D-Bolton wants to merge 2 commits into
mainfrom
daniel.FN.ESC-12336.spoofed-email
Open

Create headers_x_source_auth_sender_mismatch.yml#4497
D-Bolton wants to merge 2 commits into
mainfrom
daniel.FN.ESC-12336.spoofed-email

Conversation

@D-Bolton
Copy link
Copy Markdown
Member

@D-Bolton D-Bolton commented May 15, 2026

Description

This is an ASR rule for when the x-source-auth doesn't match the sender email.

Associated samples

Associated hunts

@D-Bolton D-Bolton marked this pull request as ready for review May 15, 2026 21:50
@D-Bolton D-Bolton requested a review from a team May 15, 2026 21:50
@D-Bolton D-Bolton requested a review from a team as a code owner May 15, 2026 21:50
github-actions Bot added a commit that referenced this pull request May 15, 2026
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label May 15, 2026
github-actions Bot added a commit that referenced this pull request May 15, 2026
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant