Attack Score Flash: Advanced Graymail Detection

calendar Oct 27, 2026  ยท
Share on: linkedin copy

Exercises the ml.attack_score_flash() function. Flags on Graymail verdicts.

Sublime rule (View on GitHub)

1name: "Attack Score Flash: Advanced Graymail Detection"
2description: "Exercises the ml.attack_score_flash() function. Flags on Graymail verdicts."
3type: "rule"
4severity: "medium"
5source: |
6  type.inbound
7  and ml.attack_score_flash().verdict == "graymail"  
8id: "f83b83bc-039b-4025-be85-78a36ffabf6e"
to-top