[Shared Samples] [PR #4514] modified rule: PR# 4514 - Brand impersonation: Morgan Stanley

Author: github-actions[bot]

detection-rules/4514_brand_impersonation_morgan_stanley.yml

@@ -54,6 +54,7 @@ source: |
       "etradefinancial.com",
       "etradefrommorganstanley.com",
       "etrademail.com",
+      "fidelity.com",
       "icapitalnetwork.com",
       "morganstanley.com",
       "morganstanley.net",
@@ -67,6 +68,8 @@ source: |
       "proxyvote.com",
       "smithbarney.com",
       "ultimusleverpoint.com",
+      "webcasts.com",
+      "zendesk.com",
       "zoom.us"
     )
     and coalesce(headers.auth_summary.dmarc.pass, false)