[senderprofile] Update impersonation_gusto.yml

MSAdministrator · MSAdministrator · commit 1589bb3c64dc · 2026-02-02T14:35:18.000-06:00
diff --git a/detection-rules/impersonation_gusto.yml b/detection-rules/impersonation_gusto.yml
@@ -14,7 +14,6 @@ source: |
           .name == "Gusto" and .confidence in ("medium", "high")
   )
   and sender.email.domain.root_domain !~ 'gusto.com'
-  and not profile.by_sender().solicited
   
   // negate highly trusted sender domains unless they fail DMARC authentication
   and (

Original file line number	Diff line number	Diff line change
`@@ -14,7 +14,6 @@ source: \|`
`14`	`14`	`.name == "Gusto" and .confidence in ("medium", "high")`
`15`	`15`	`)`
`16`	`16`	`and sender.email.domain.root_domain !~ 'gusto.com'`
`17`		`- and not profile.by_sender().solicited`
`18`	`17`
`19`	`18`	`// negate highly trusted sender domains unless they fail DMARC authentication`
`20`	`19`	`and (`