We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 10a1f93 commit 686f8fdCopy full SHA for 686f8fd
1 file changed
detection-rules/4613_beta_fuzzy_graymail_rule.yml
@@ -0,0 +1,11 @@
1
+name: "Beta: Fuzzy Graymail"
2
+description: "Exercises the beta.fuzzy_attack_score() function. Flags on Graymail verdicts."
3
+type: "rule"
4
+severity: "medium"
5
+source: |
6
+ type.inbound
7
+ and any([beta.fuzzy_attack_score()], .analyzed and .verdict == "graymail")
8
+id: "d1aa603a-668e-5494-9b9d-cd7d556d112e"
9
+og_id: "f83b83bc-039b-4025-be85-78a36ffabf6e"
10
+testing_pr: 4613
11
+testing_sha: 468a6612e9edbd7964e271c896c6f46e3dd023f1
0 commit comments