Skip to content

Update attachment_adobe_image_lure.yml#4512

Open
MSAdministrator wants to merge 2 commits into
mainfrom
msadministrator.fn.ESC-13825.update_attach_adobe_sender_rare
Open

Update attachment_adobe_image_lure.yml#4512
MSAdministrator wants to merge 2 commits into
mainfrom
msadministrator.fn.ESC-13825.update_attach_adobe_sender_rare

Conversation

@MSAdministrator
Copy link
Copy Markdown
Member

Description

This updates the Attachment: Adobe image lure in body or attachment with suspicious link rule to include senders that are soliticed but have rare prevalence with the recipient. This spanned because of a runner ping.

Associated samples

Associated hunts

@MSAdministrator MSAdministrator requested a review from a team May 20, 2026 14:11
@MSAdministrator MSAdministrator requested a review from a team as a code owner May 20, 2026 14:11
github-actions Bot added a commit that referenced this pull request May 20, 2026
…image lure in body or attachment with suspicious link
@MSAdministrator MSAdministrator added the in-test-rules PR is in our testing suite to collect telemetry label May 20, 2026
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request May 20, 2026
… image lure in body or attachment with suspicious link
github-actions Bot added a commit that referenced this pull request May 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant