Aiden Mitchell comments

Repositories
Issues
Comments

Results 112 comments of


                                            Aiden Mitchell

New rule (brand impersonation): DocuSign (via HTML attachment)

/update-test-rules

New insight: Salesforce HTML attachment

The attached HTML file is from Salesforce, so it's probably safe. Nice indicator with any HTML rules.

New insight: Salesforce HTML attachment

> then it should be a negation in the HTML rules yeah? usually these trigger `Any HTML file*` rules, do we want to negate there? Seems incongruent to those rules....

Update fake_thread_suspicious_indicators.yml

/mql-mimic-exempt 265910

New rule (Brand impersonation): Royal Canadian Mounted Police

/update-test-rules

New rules (brand impersonation): IRS & CRA

/update-test-rules

New rules (brand impersonation): IRS & CRA

/update-test-rules

New rules (brand impersonation): IRS & CRA

/update-test-rules

Update fake_tax_prep_request.yml

/update-test-rules

Update fake_tax_prep_request.yml

/update-test-rules