From a27a08cdb3038f6004a6d00164711271fa5fcc47 Mon Sep 17 00:00:00 2001
From: Aiden Mitchell <me@aidenmitchell.ca>
Date: Mon, 11 Dec 2023 12:29:19 -0800
Subject: [PATCH] Create high_trust.yml

---
 insights/sender/high_trust.yml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 insights/sender/high_trust.yml

diff --git a/insights/sender/high_trust.yml b/insights/sender/high_trust.yml
new file mode 100644
index 00000000000..7247de164e2
--- /dev/null
+++ b/insights/sender/high_trust.yml
@@ -0,0 +1,5 @@
+name: "High trust sender domain"
+type: "query"
+source: |
+  filter([sender.email.email], sender.email.domain.root_domain in $high_trust_sender_root_domains)
+severity: "informational"