Skip to content

Create link_personalized_url_recipient_address on_commonly_abused_web.yml#3947

Merged
hadojae merged 28 commits intomainfrom
hadojae.fn.na.link_personalized_url_recipient_address-on_commonly_abused_web_service
Apr 1, 2026
Merged

Create link_personalized_url_recipient_address on_commonly_abused_web.yml#3947
hadojae merged 28 commits intomainfrom
hadojae.fn.na.link_personalized_url_recipient_address-on_commonly_abused_web_service

Conversation

@hadojae
Copy link
Copy Markdown
Member

@hadojae hadojae commented Feb 3, 2026

…_service.yml

Description

This looks for emails containing links which are hosted on commonly abused web services containing a # and the recipient's email in the url.

Associated hunts

Screenshot (insights)

@hadojae hadojae requested a review from a team February 3, 2026 19:41
@hadojae hadojae requested a review from a team as a code owner February 3, 2026 19:41
@hadojae hadojae changed the title Create link_personalized_url_recipient_address on_commonly_abused_web… Create link_personalized_url_recipient_address on_commonly_abused_web.yml Feb 3, 2026
hadojae and others added 2 commits February 3, 2026 13:35
…_service.yml to link_personalized_url_recipient_address_on_commonly_abused_web_service.yml

space in filename
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 4, 2026
github-actions Bot added a commit that referenced this pull request Feb 4, 2026
…pient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Feb 6, 2026
github-actions Bot added a commit that referenced this pull request Feb 6, 2026
…pient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Feb 9, 2026
…pient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Feb 9, 2026
…_service.yml

move the unsubscribe check out of the loop
github-actions Bot added a commit that referenced this pull request Feb 10, 2026
github-actions Bot added a commit that referenced this pull request Feb 10, 2026
…pient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Feb 12, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Feb 12, 2026
…cipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Mar 19, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Mar 20, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Mar 20, 2026
…cipient address on commonly abused web service
…_service.yml

have to narrow the scope of this rule to bring down the numbers across the board
github-actions Bot added a commit that referenced this pull request Mar 23, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Mar 23, 2026
…cipient address on commonly abused web service
@hadojae
Copy link
Copy Markdown
Member Author

hadojae commented Mar 31, 2026

this is the best balance i can strike here that has really high TP rates. catching uncovered things as well, updated hunt. ready for another review.

@hadojae hadojae added the review-needed Indicates that a PR is waiting for review label Mar 31, 2026
@hadojae hadojae requested a review from zoomequipd March 31, 2026 16:04
github-actions Bot added a commit that referenced this pull request Mar 31, 2026
…cipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Mar 31, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Apr 1, 2026
…zed URL with recipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Apr 1, 2026
…cipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Apr 1, 2026
…cipient address on commonly abused web service
github-actions Bot added a commit that referenced this pull request Apr 1, 2026
…zed URL with recipient address on commonly abused web service
@hadojae
Copy link
Copy Markdown
Member Author

hadojae commented Apr 1, 2026

changes made, hunt updated

@hadojae hadojae requested a review from zoomequipd April 1, 2026 20:59
@hadojae hadojae added this pull request to the merge queue Apr 1, 2026
Merged via the queue into main with commit 160ea5f Apr 1, 2026
3 checks passed
@hadojae hadojae deleted the hadojae.fn.na.link_personalized_url_recipient_address-on_commonly_abused_web_service branch April 1, 2026 23:25
github-actions Bot added a commit that referenced this pull request Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants