Updating Rule: link_credential_phishing_voicemail_language.yml (#763)

aidenmitchell · web-flow · commit 955c39fba3c9 · 2023-09-01T14:01:19.000-04:00
diff --git a/detection-rules/link_credential_phishing_voicemail_language.yml b/detection-rules/link_credential_phishing_voicemail_language.yml
@@ -36,6 +36,7 @@ source: |
       any(recipients.to, strings.icontains(sender.display_name, .email.domain.sld))
     ),
   )
+  and sender.email.domain.root_domain not in ("magicjack.com")
   and (
     (
       sender.email.domain.root_domain in $free_email_providers

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,7 @@ source: \|`
`36`	`36`	`any(recipients.to, strings.icontains(sender.display_name, .email.domain.sld))`
`37`	`37`	`),`
`38`	`38`	`)`
	`39`	`+ and sender.email.domain.root_domain not in ("magicjack.com")`
`39`	`40`	`and (`
`40`	`41`	`(`
`41`	`42`	`sender.email.domain.root_domain in $free_email_providers`