Skip to content

Create attachment_pdf_suspicious_financial_lure.yml#4598

Draft
keaton-sublime wants to merge 2 commits into
mainfrom
keaton-sublime.fn.esc-13754.pdf_attachment_name
Draft

Create attachment_pdf_suspicious_financial_lure.yml#4598
keaton-sublime wants to merge 2 commits into
mainfrom
keaton-sublime.fn.esc-13754.pdf_attachment_name

Conversation

@keaton-sublime

@keaton-sublime keaton-sublime commented Jun 3, 2026

Copy link
Copy Markdown
Member

Description

Matches messages which have PDF attachments with particular file names.

Associated samples

Associated hunts

@keaton-sublime keaton-sublime added the in-test-rules PR is in our testing suite to collect telemetry label Jun 3, 2026
github-actions Bot added a commit that referenced this pull request Jun 3, 2026
…le with recipient domain and ATT eCheckRun pattern
github-actions Bot added a commit that referenced this pull request Jun 3, 2026
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request Jun 3, 2026
…ile with recipient domain and ATT eCheckRun pattern
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant