sublime-rules icon indicating copy to clipboard operation
sublime-rules copied to clipboard

Published 20 hours ago • verified publisher icon sublime-security

Update impersonation_docusign.yml

Open zoomequipd opened this issue 8 months ago • 4 comments

Description

  1. Format
  2. Add additional regex for additional methods of obfuscating Docusign
  3. Add additional color to find the blue background
  4. update regex for finding background color to variations
  5. add ilevenshtein for "review and sign" display_text to cover things like rev1ew and s1gn

Associated samples

Associated hunts

Net new coverage

zoomequipd avatar Apr 03 '25 16:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 03 '25 17:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 04 '25 17:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 04 '25 17:04 zoomequipd

pending https://github.com/sublime-security/static-files/pull/382

zoomequipd avatar Apr 11 '25 03:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 15 '25 15:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 15 '25 16:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 28 '25 13:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 30 '25 04:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 30 '25 14:04 zoomequipd

/update-test-rules

zoomequipd avatar Apr 30 '25 17:04 zoomequipd

/update-test-rules

zoomequipd avatar May 01 '25 11:05 zoomequipd

/update-test-rules

zoomequipd avatar May 03 '25 12:05 zoomequipd

/update-test-rules

zoomequipd avatar May 05 '25 02:05 zoomequipd

/update-test-rules

zoomequipd avatar May 06 '25 02:05 zoomequipd

i'm happy where this is at now. ready for review

zoomequipd avatar May 06 '25 13:05 zoomequipd