Skip to content

Create brand_impersonation_salesforce.yml #3050

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 19 commits into
base: main
Choose a base branch
from

Conversation

markmsublime
Copy link
Member

Description

New rule for brand impersonation of Salesforce.

Associated samples

- Sample 1
- Sample 2
- Sample 3

Associated hunts

- Hunt 1

FP in hunt would not have fired in customer env with sender profile conditions.

@markmsublime markmsublime requested a review from a team as a code owner August 4, 2025 22:24
@markmsublime markmsublime changed the title Create brand_impersonation_salesforce Create brand_impersonation_salesforce.yml Aug 4, 2025
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Aug 4, 2025
github-actions bot added a commit that referenced this pull request Aug 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in-test-rules PR is in our testing suite to collect telemetry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant