sublime-rules

sublime-rules copied to clipboard

Update attachment_adobe_image_lure.yml

1

morriscode

new rule: fraud_china_domain_name_scam.yml

1

morriscode

New Rule: Credential Phishing: Hyper-linked image leading to free file host

3

morriscode

Needs `strings.replace_confusables` to be GA.

aidenmitchell

Create infrastructure_abuse_ts.yml

1

aidenmitchell

aidenmitchell

New Rule: Brand Impersonation: DocuSign with embedded QR code

1

morriscode

New insight: Attachment contains OLE relationship to IP address

1

aidenmitchell

New Rule: Spam Attendee List solicitation

2

morriscode

New insight: Salesforce HTML attachment

4

To call out attachments sent from Salesforce (example): ``` Attachment not opening? Click this link: testdocument.pdf ```

aidenmitchell