Files
splunk-security_content/macros/deprecated/evilginx_phishlets_github.yml
2025-12-22 14:01:09 +01:00

5 lines
189 B
YAML

definition: (query=api* AND query = github*)
description: This limits the query fields to domains that are associated with evilginx
masquerading as GitHub
name: evilginx_phishlets_github