splunk-security_content/lookups/suspicious_email_attachments.csv

1	file_name	suspicious
2	*.doc.com	true
3	*.doc.exe	true
4	*.docx.com	true
5	*.docx.exe	true
6	*.pdf.com	true
7	*.pdf.exe	true
8	*.ppt.com	true
9	*.ppt.exe	true
10	*.pptx.com	true
11	*.pptx.exe	true
12	*.swf.com	true
13	*.swf.exe	true
14	*.xls.com	true
15	*.xls.exe	true
16	*.xlsx.com	true
17	*.xlsx.exe	true
18	*.zip.com	true
19	*.zip.exe	true
20	*.bat	true
21	*.com	true
22	*.cmd	true
23	*.cpl	true
24	*.exe	true
25	*.hlp	true
26	*.hta	true
27	*.jar	true
28	*.js	true
29	*.msi	true
30	*.pif	true
31	*.ps1	true
32	*.rar	true
33	*.reg	true
34	*.scr	true
35	*.vbs	true
36	*.wsf	true