Skip to content

update impersonation SAA rule#4373

Open
cybher0808 wants to merge 2 commits intomainfrom
cybher0808.fn.ESC-11144.SSAmalicious
Open

update impersonation SAA rule#4373
cybher0808 wants to merge 2 commits intomainfrom
cybher0808.fn.ESC-11144.SSAmalicious

Conversation

@cybher0808
Copy link
Copy Markdown
Member

@cybher0808 cybher0808 commented Apr 20, 2026

Description

updating rule for SSA, finding additional samples in FN que

Associated samples

Associated hunts

@cybher0808 cybher0808 requested a review from a team April 20, 2026 22:43
@cybher0808 cybher0808 requested a review from a team as a code owner April 20, 2026 22:43
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Apr 20, 2026
github-actions Bot added a commit that referenced this pull request Apr 20, 2026
@cybher0808 cybher0808 self-assigned this Apr 20, 2026
github-actions Bot added a commit that referenced this pull request Apr 20, 2026
@cybher0808
Copy link
Copy Markdown
Member Author

Added conditions for body.text to meet coverage for additional FN's in que. The link for Net New has been updated.

github-actions Bot added a commit that referenced this pull request Apr 21, 2026
github-actions Bot added a commit that referenced this pull request Apr 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant