sublime-rules
sublime-rules copied to clipboard
sublime-security
Sublime rules for email attack detection, prevention, and threat hunting.
Feel free to tweak the name, I was drawing a blank. We saw about 2000 of these earlier with the only rule firing being "Russia return-path TLD (untrusted sender)" thought...
Changing negation to case-insensitive.
- https://platform.sublime.security/hunts/fb25c634-89cf-4fac-8354-efe3889ba7d0
Metadata
Owner
Metadata
Sublime rules for email attack detection, prevention, and threat hunting.