New Insights (Sender Prevalence && Sender previously flagged maliciou…

…s or spam) (#905)
sublime-security · Nov 2, 2023 · 1350b13 · 1350b13
1 parent 753b9ae
commit 1350b13
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/insights/sender/prevalence.yml b/insights/sender/prevalence.yml
@@ -0,0 +1,5 @@
+name: "Sender Prevalence"
+type: "query"
+source: |
+  profile.by_sender().prevalence
+severity: "informational"
diff --git a/insights/sender/profile_any_malicious_or_spam.yml b/insights/sender/profile_any_malicious_or_spam.yml
@@ -0,0 +1,5 @@
+name: "Sender previously flagged as malicious or spam"
+type: "query"
+source: |
+  profile.by_sender().any_messages_malicious_or_spam == true
+severity: "high"