Skip to content

Create link_trac_link_jwt_encoded.yml - #5301

Open
missingn0pe wants to merge 3 commits into
mainfrom
missingn0pe.fn.ESC-24587.trac_link_jwt_encoded
Open

Create link_trac_link_jwt_encoded.yml#5301
missingn0pe wants to merge 3 commits into
mainfrom
missingn0pe.fn.ESC-24587.trac_link_jwt_encoded

Conversation

@missingn0pe

@missingn0pe missingn0pe commented Sep 9, 2026

Copy link
Copy Markdown
Member

Description

Detects messages containing links to trac-link.com, in either the body or PDF attachments, with JWT encoded url paths.

Associated samples

Associated hunts

Detects messages containing links to trac-link.com, in either the body or PDF attachments, with JWT encoded url paths.
@missingn0pe
missingn0pe requested a review from a team September 9, 2026 00:41
@missingn0pe
missingn0pe requested a review from a team as a code owner September 9, 2026 00:41
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Sep 9, 2026
Adding minimum count definers.
github-actions Bot added a commit that referenced this pull request Sep 9, 2026
github-actions Bot added a commit that referenced this pull request Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant