diff --git a/detection-rules/link_google_translate.yml b/detection-rules/link_google_translate.yml index 06a07041f60..4f34f45938d 100644 --- a/detection-rules/link_google_translate.yml +++ b/detection-rules/link_google_translate.yml @@ -10,7 +10,7 @@ authors: severity: "low" source: | type.inbound - and any(body.links, .href_url.domain.root_domain == "translate.goog") + and any(body.links, "google_translate_open_redirect" in .href_url.rewrite.encoders) and ( not profile.by_sender().solicited or (