Attack Score Flash: Potentially Malicious

calendar Oct 27, 2026  ยท
Share on: linkedin copy

Exercises the ml.attack_score_flash() function. Flags on Malicious or Potentially Malicious verdicts.

Sublime rule (View on GitHub)

1name: "Attack Score Flash: Potentially Malicious"
2description: "Exercises the ml.attack_score_flash() function. Flags on Malicious or Potentially Malicious verdicts."
3type: "rule"
4severity: "medium"
5source: |
6  type.inbound
7  and ml.attack_score_flash().verdict in ("malicious", "potentially_malicious")  
8id: "9dcd6952-aeec-409a-b9f1-9d1d5a781595"
to-top