You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: detection-rules/recon_hotel_booking_reply_to_redirect.yml
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
name: "Reconnaissance: Hotel booking reply-to redirect"
2
-
description: "Detects messages impersonating hotel booking inquiries by identifying common hotel-related language patterns from senders where the reply-to domain differs from the sender domain to validate whether a recipient address is valid or not, potentially preceding an attack."
2
+
description: "Detects messages impersonating hotel booking inquiries by identifying common hotel-related language patterns from senders where the reply-to is a free email provider and differs from the sender domain in an effort to validate whether a recipient address is valid or not, potentially preceding an attack."
0 commit comments