Attack Score Flash: Spam Detection

Exercises the ml.attack_score_flash() function. Flags on Spam verdicts.

Sublime rule (View on GitHub)

 1name: "Attack Score Flash: Spam Detection"
 2description: "Exercises the ml.attack_score_flash() function. Flags on Spam verdicts."
 3type: "rule"
 4severity: "medium"
 5source: |
 6  type.inbound
 7  and ml.attack_score_flash().verdict == "spam"  
 8tags:
 9  - "Attack surface reduction"
10id: "8923b274-b91c-4b18-9cff-f9926cd484fa"

Related rules

to-top