Skip to content

Conversation

missingn0pe
Copy link
Member

Description

Detects messages impersonating Punchbowl invitations not originating from legitimate Punchbowl domain.

Associated samples

- Sample 1
- Sample 2

Associated hunts

- Hunt 1

@missingn0pe missingn0pe requested a review from a team as a code owner September 26, 2025 18:58
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Sep 26, 2025
Copy link
Member Author

@missingn0pe missingn0pe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removing OCR for efficacy & replacing with strings on all threads, plus checking alt text.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in-test-rules PR is in our testing suite to collect telemetry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant