Files
splunk-security_content/macros/evilginx_phishlets_github.yml
2019-10-16 16:38:05 +02:00

5 lines
189 B
YAML

definition: (query=api* AND query = github*)
description: This limits the query fields to domains that are associated with evilginx
masquerading as GitHub
name: evilginx_phishlets_github