Update body_advance_fee_new_sender.yml#4600
Conversation
github-actions
Bot
added
the
in-test-rules
…mail provider or suspicious TLD
…(AFF) from freemail provider or suspicious TLD
… (AFF) from freemail provider or suspicious TLD
|
Results look solid, hunt in description has been updated. Marking r4r |
|
This logic is great and the results speak for themselves, I wanted to surface this FP and see what your thoughts on it are. Fine with accepting this as an FP and approving the rule but wanted to run it by you. I understand you're out rn so just HMU when you're back for a re-review https://platform.sublime.security/messages/506a1ee50bf2336dccdc95b188591e7af418a6d263b799252f256b8a2e08587f?preview_id=019eac94-da1b-7225-9233-6ab3e72cfffb |
1 similar comment
|
This logic is great and the results speak for themselves, I wanted to surface this FP and see what your thoughts on it are. Fine with accepting this as an FP and approving the rule but wanted to run it by you. I understand you're out rn so just HMU when you're back for a re-review https://platform.sublime.security/messages/506a1ee50bf2336dccdc95b188591e7af418a6d263b799252f256b8a2e08587f?preview_id=019eac94-da1b-7225-9233-6ab3e72cfffb |
2 participants
Description
Adding logic to look for sender/reply-to mismatch and
lengthofrecipients.tois equal to0Associated samples
Associated hunts