Skip to content

Create spam_financial_preapproval_link.yml #2916

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

aidenmitchell
Copy link
Member

Description

Detects suspicious financial communications containing pre-approval language and links with capitalized display text from untrusted or DMARC-failing senders who have no prior benign message history.

Associated samples

@aidenmitchell aidenmitchell requested a review from a team as a code owner July 9, 2025 21:31
@aidenmitchell aidenmitchell added the in-test-rules PR is in our testing suite to collect telemetry label Jul 9, 2025
@aidenmitchell
Copy link
Member Author

/update-test-rules

github-actions bot pushed a commit that referenced this pull request Jul 9, 2025
Create spam_financial_preapproval_link.yml by @aidenmitchell
#2916
Source SHA 4f7338c
Triggered by @aidenmitchell
@aidenmitchell aidenmitchell added this pull request to the merge queue Jul 14, 2025
@aidenmitchell aidenmitchell removed this pull request from the merge queue due to a manual request Jul 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in-test-rules PR is in our testing suite to collect telemetry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants