Skip to content

Commit a2a67d6

Browse files
[PR #2729] modified rule: Service abuse: Monday.com infrastructure with phishing intent
1 parent fe58d94 commit a2a67d6

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

detection-rules/2729_monday_infra_abuse.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: "Monday.com link infrastructure abuse"
1+
name: "Service abuse: Monday.com infrastructure with phishing intent"
22
description: "Detects unauthorized use of Monday.com tracking links in messages, attachments, or QR codes from unusual senders who lack proper authentication. Excludes legitimate replies and messages from trusted domains with valid DMARC."
33
type: "rule"
44
severity: "high"
@@ -144,4 +144,4 @@ detection_methods:
144144
id: "c778ee1a-92b4-5971-ac77-5514627ce5c0"
145145
og_id: "a346e3b1-603e-5ef0-8547-d40ba4282352"
146146
testing_pr: 2729
147-
testing_sha: 3cc173163551cfdc6548886d4380adf9ffc0c010
147+
testing_sha: c7f250e64c1fb87075edf8ed83650db618d0d4ce

0 commit comments

Comments
 (0)