Fuzzy Attack Score: Advanced Graymail Detection
Exercises the beta.fuzzy_attack_score() function. Flags on Graymail verdicts.
Sublime rule (View on GitHub)
1name: "Fuzzy Attack Score: Advanced Graymail Detection"
2description: "Exercises the beta.fuzzy_attack_score() function. Flags on Graymail verdicts."
3type: "rule"
4severity: "medium"
5source: |
6 type.inbound
7 //
8 // This rule makes use of a beta feature and is subject to change without notice
9 // using the beta feature in custom rules is not suggested until it has been formally released
10 //
11 and beta.fuzzy_attack_score().verdict == "graymail"
12id: "f83b83bc-039b-4025-be85-78a36ffabf6e"