Skip to content

Update attachment_credential_phishing_image_as_content.yml#3949

Closed
D-Bolton wants to merge 5 commits intomainfrom
daniel.fn.ESC-6769.FN--BEC-impersonation-spoofing-organization's-HR
Closed

Update attachment_credential_phishing_image_as_content.yml#3949
D-Bolton wants to merge 5 commits intomainfrom
daniel.fn.ESC-6769.FN--BEC-impersonation-spoofing-organization's-HR

Conversation

@D-Bolton
Copy link
Copy Markdown
Member

@D-Bolton D-Bolton commented Feb 3, 2026

Description

Check if there is a recipient domain reference in the display name and in the image.

Associated samples

Associated hunts

Check for QR code

@D-Bolton D-Bolton marked this pull request as ready for review February 3, 2026 20:31
@D-Bolton D-Bolton requested a review from a team February 3, 2026 20:31
@D-Bolton D-Bolton requested a review from a team as a code owner February 3, 2026 20:31
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 3, 2026
github-actions Bot added a commit that referenced this pull request Feb 5, 2026
github-actions Bot added a commit that referenced this pull request Feb 5, 2026
@D-Bolton
Copy link
Copy Markdown
Member Author

Closing this one because I've decided to make a new rule instead.

@D-Bolton D-Bolton closed this Feb 10, 2026
github-actions Bot added a commit that referenced this pull request Feb 10, 2026
github-actions Bot added a commit that referenced this pull request Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant