[PR #3050] modified rule: Brand Impersonation: Salesforce

Author: github-actions[bot]

detection-rules/3050_brand_impersonation_salesforce.yml

@@ -17,6 +17,7 @@ source: |
         sender.email.domain.root_domain in (
           "salesforce.com",
           "salesforceventures.com",
+          "exacttarget.com",
           "tangocard.com", // https://www.tangocard.com/salesforce-partnership
           "elevatesalesforce.com", // unrelated but name in domain 
           "salesforceben.com", // salesforce newsletter
@@ -72,4 +73,4 @@ detection_methods:
 id: "c5f0e666-81f0-5d17-a470-12ab75113631"
 og_id: "736dfb87-1f99-5cdb-aefc-392257376f3d"
 testing_pr: 3050
-testing_sha: e316d802023acab08a4ea93eb6e4f064fa9e5220
+testing_sha: de5e5eaf60693f5d58478ddc693764e46e9a10c8