Skip to content

Update impersonation_employee_urgent_request.yml#4376

Open
JFarina5 wants to merge 1 commit intomainfrom
JFarina5.FN.ESC-11694.impersonation.employee.urgent
Open

Update impersonation_employee_urgent_request.yml#4376
JFarina5 wants to merge 1 commit intomainfrom
JFarina5.FN.ESC-11694.impersonation.employee.urgent

Conversation

@JFarina5
Copy link
Copy Markdown
Member

Description

For a runner ping, updated logic to look for the request entities, freemail sender, and PHISH, SPOOF, or HSPM category header values

Associated samples

Associated hunts

@JFarina5 JFarina5 requested a review from a team April 21, 2026 15:46
@JFarina5 JFarina5 requested a review from a team as a code owner April 21, 2026 15:46
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Apr 21, 2026
github-actions Bot added a commit that referenced this pull request Apr 21, 2026
github-actions Bot added a commit that referenced this pull request Apr 21, 2026
…tion with urgent request (untrusted sender)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant