Skip to content

Conversation

@MSAdministrator
Copy link
Member

Description

Detects messages with PDF attachments containing urgent financial or legal requests in very short message bodies from new or low-reputation senders.

Associated samples

Associated hunts

@MSAdministrator MSAdministrator self-assigned this Dec 17, 2025
@MSAdministrator MSAdministrator requested a review from a team as a code owner December 17, 2025 15:13
@MSAdministrator MSAdministrator added the in-test-rules PR is in our testing suite to collect telemetry label Dec 17, 2025
github-actions bot added a commit that referenced this pull request Dec 17, 2025
@MSAdministrator
Copy link
Member Author

Closing this in favor of #3661

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant