From cc904955a094d72b16d407b7d52f0de0ce0593f3 Mon Sep 17 00:00:00 2001 From: Luke Wescott <69780712+IndiaAce@users.noreply.github.com> Date: Tue, 16 Dec 2025 15:24:36 -0500 Subject: [PATCH] Update body_business_email_compromise_new_sender.yml --- detection-rules/body_business_email_compromise_new_sender.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detection-rules/body_business_email_compromise_new_sender.yml b/detection-rules/body_business_email_compromise_new_sender.yml index abec8e9cec9..7af6156452d 100644 --- a/detection-rules/body_business_email_compromise_new_sender.yml +++ b/detection-rules/body_business_email_compromise_new_sender.yml @@ -31,7 +31,7 @@ source: | ) ) and ( - not profile.by_sender().solicited + not profile.by_sender_email().solicited or ( profile.by_sender().any_messages_malicious_or_spam and not profile.by_sender().any_messages_benign