Skip to content

Update impersonation_netflix.yml - #5309

Open
JFarina5 wants to merge 1 commit into
mainfrom
JFarina5.FN.ESC-24813.impersonation.netflix
Open

Update impersonation_netflix.yml#5309
JFarina5 wants to merge 1 commit into
mainfrom
JFarina5.FN.ESC-24813.impersonation.netflix

Conversation

@JFarina5

@JFarina5 JFarina5 commented Sep 9, 2026

Copy link
Copy Markdown
Member

Description

Updating logic to tag samples that have a body that starts with netflix with cred_theft intent

Associated samples

Associated hunts

@JFarina5
JFarina5 requested a review from a team September 9, 2026 18:11
@JFarina5
JFarina5 requested a review from a team as a code owner September 9, 2026 18:11
github-actions Bot added a commit that referenced this pull request Sep 9, 2026
@github-actions github-actions Bot added hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules labels Sep 9, 2026
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Test Rules Sync - Excluded

This PR contains rules that use ml.link_analysis, which is not supported in the test-rules environment.

The hunting-required label has been applied. These rules will need to be tested through alternative methods.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant