Fuzzy Attack Score: Advanced Graymail Detection

Exercises the beta.fuzzy_attack_score() function. Flags on Graymail verdicts.

Sublime rule (View on GitHub)

 1name: "Fuzzy Attack Score: Advanced Graymail Detection"
 2description: "Exercises the beta.fuzzy_attack_score() function. Flags on Graymail verdicts."
 3type: "rule"
 4severity: "medium"
 5source: |
 6  type.inbound
 7  //
 8  // This rule makes use of a beta feature and is subject to change without notice
 9  // using the beta feature in custom rules is not suggested until it has been formally released
10  //
11  and beta.fuzzy_attack_score().verdict == "graymail"  
12id: "f83b83bc-039b-4025-be85-78a36ffabf6e"
to-top