Files
splunk-security_content/macros/deprecated/evilginx_phishlets_amazon.yml
2025-12-22 14:01:09 +01:00

5 lines
207 B
YAML

definition: (query=fls-na* AND query = www* AND query=images*)
description: This limits the query fields to domains that are associated with evilginx
masquerading as Amazon
name: evilginx_phishlets_amazon