Skip to content

Create brand_impersonation_greenvelope.yml #3487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
zoomequipd merged 9 commits into from
Dec 1, 2025
Merged

Create brand_impersonation_greenvelope.yml #3487

zoomequipd merged 9 commits into from
Dec 1, 2025

Conversation

@zoomequipd
Copy link
Member

@zoomequipd zoomequipd commented Nov 6, 2025

Description

Add new coverage for observed use of Greenvople evite branding to distribute malware/credphish.

Associated hunts

@zoomequipd zoomequipd requested a review from a team as a code owner November 6, 2025 20:26
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Nov 6, 2025
github-actions bot added a commit that referenced this pull request Nov 6, 2025
@github-actions
[PR #3487] added rule: Brand impersonation: Greenvelope
dd16382
github-actions bot added a commit that referenced this pull request Nov 8, 2025
@github-actions
[PR #3487] modified rule: Brand impersonation: Greenvelope
c23b36b
github-actions bot added a commit that referenced this pull request Nov 12, 2025
@github-actions
[PR #3487] modified rule: Brand impersonation: Greenvelope
eda4539
github-actions bot added a commit that referenced this pull request Nov 18, 2025
@github-actions
[PR #3487] modified rule: Brand impersonation: Greenvelope
c978b3c
@zoomequipd
Copy link
Member Author

zoomequipd commented Nov 20, 2025

latest rev looking good.

@zoomequipd zoomequipd added the review-needed Indicates that a PR is waiting for review label Nov 20, 2025
aidenmitchell
aidenmitchell reviewed Nov 20, 2025
View reviewed changes
github-actions bot added a commit that referenced this pull request Nov 25, 2025
@github-actions
[PR #3487] modified rule: Brand impersonation: Greenvelope
2c09ee2
@zoomequipd zoomequipd removed the review-needed Indicates that a PR is waiting for review label Nov 25, 2025
@zoomequipd zoomequipd added the review-needed Indicates that a PR is waiting for review label Nov 25, 2025
@zoomequipd zoomequipd added this pull request to the merge queue Dec 1, 2025
Merged via the queue into main with commit b8eb748 Dec 1, 2025
3 checks passed
@zoomequipd zoomequipd deleted the zoomequipd-patch-4 branch December 1, 2025 14:45
github-actions bot added a commit that referenced this pull request Dec 1, 2025
@github-actions
[PR #3487] Delete detection rule
a7191b4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aidenmitchell aidenmitchell aidenmitchell approved these changes

Assignees

No one assigned

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@zoomequipd @aidenmitchell