Sync from PR#2251

Create link_azurecomm.yml by @zoomequipd #2251 Source SHA fb42741 Triggered by @zoomequipd
sublime-security · Dec 30, 2024 · 3721b0e · 3721b0e
1 parent 09fdac6
commit 3721b0e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/detection-rules/link_azurecomm.yml b/detection-rules/link_azurecomm.yml
@@ -15,7 +15,7 @@ source: |
       profile.by_sender().any_messages_malicious_or_spam
       and not profile.by_sender().any_false_positives
     )
-    or profile.by_sender_email().prevalence == "new"
+    or profile.by_sender().prevalence == "new"
   )
 
   // negate highly trusted sender domains unless they fail DMARC authentication
@@ -40,4 +40,4 @@ detection_methods:
   - "Sender analysis"
 id: "636c07a0-4bb3-52fe-912e-d39b3cfa024c"
 testing_pr: 2251
-testing_sha: dd8c23ecea8513c47078ebe167f94adaa8f62a9b
+testing_sha: fb42741c2e6be193628e6204a578195e4ea4bdf2