Files

 main

/

discovery-rules

/

Copy path

Directory actions

More options

Directory actions

More options

Latest commit

aidenmitchell

Create mass_outbound_free_file_host.yml (#2298)

Jan 10, 2025

e5677f5 · Jan 10, 2025

History

History

/

discovery-rules

/

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
attachment_any_eml.yml		attachment_any_eml.yml	Improve usage of OCR in rules and switch more to of (#684)	Aug 21, 2023
attachment_pdf_embedded_js.yml		attachment_pdf_embedded_js.yml	Moving rule to discovery: attachment_pdf_embedded_js.yml (#1103)	Dec 7, 2023
attachment_pdf_file_with_embedded_content.yml		attachment_pdf_file_with_embedded_content.yml	Moving rule to discovery (#797)	Sep 18, 2023
attachment_suspicious_macro.yml		attachment_suspicious_macro.yml	MQL Mimic Exemption Follow Ups (#1206)	Dec 28, 2023
attachment_with_free_subdomain_host_unsolicited.yml		attachment_with_free_subdomain_host_unsolicited.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
attachment_with_url_shortener_unsolicited.yml		attachment_with_url_shortener_unsolicited.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
current_event_crowdstrike.yml		current_event_crowdstrike.yml	Update CS Discovery Rule - current_event_crowdstrike.yml (#1776)	Jul 26, 2024
headers_privatelayer_vps.yml		headers_privatelayer_vps.yml	New Discovery Rule: Privatelayer VPS in Headers (#187)	Feb 14, 2023
headers_rootlayer_vps.yml		headers_rootlayer_vps.yml	New Discovery Rule: Rootlayer VPS in Headers (#186)	Feb 14, 2023
impersonation_dmarc_failure_high_cred_phish_conclusion.yml		impersonation_dmarc_failure_high_cred_phish_conclusion.yml	Use body.current_thread.text more consistently (#1504)	May 3, 2024
impersonation_github_sawfish.yml		impersonation_github_sawfish.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
impersonation_recipient_sld_in_sender_local_fts.yml		impersonation_recipient_sld_in_sender_local_fts.yml	Changing FTS to "untrusted sender" (#1251)	Jan 23, 2024
invoice_from_freemail_sender.yml		invoice_from_freemail_sender.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
link_cuttly.yml		link_cuttly.yml	New Discovery Rule: Cutt.ly hosting link (#189)	Mar 18, 2023
link_firebase_storage.yml		link_firebase_storage.yml	Add link_firebase_storage.yml to discovery rules (#267)	Feb 17, 2023
link_fleek_co.yml		link_fleek_co.yml	New Discovery Rule: Fleek.co storage link (#190)	Mar 18, 2023
link_freefile_freemail_nlu.yml		link_freefile_freemail_nlu.yml	Use body.current_thread.text more consistently (#1504)	May 3, 2024
link_navohost_com.yml		link_navohost_com.yml	New Discovery Rule: Navohost.com hosting link (#191)	Mar 18, 2023
mass_outbound_free_file_host.yml		mass_outbound_free_file_host.yml	Create mass_outbound_free_file_host.yml (#2298)	Jan 10, 2025
new_account_verification_code.yml		new_account_verification_code.yml	Create new_account_verification_code.yml (#2156)	Nov 25, 2024
outbound_to_disposable.yml		outbound_to_disposable.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
url_shortener_blocklist.yml		url_shortener_blocklist.yml	Multiple Rules: Feedback Tuning (#299)	Mar 7, 2023
url_shortener_from_suspicious_sender_tld.yml		url_shortener_from_suspicious_sender_tld.yml	Run autoformatting on all rule source (#672)	Aug 21, 2023
View all files