diff --git a/insights/headers/mismatched_from_reply_to.yml b/insights/headers/mismatched_from_reply_to.yml index 8bd00b62bae..ac9a2761923 100644 --- a/insights/headers/mismatched_from_reply_to.yml +++ b/insights/headers/mismatched_from_reply_to.yml @@ -1,4 +1,4 @@ -name: "Mismatched From and Reply-to" +name: "Mismatched Sender (From) and Reply-to" type: "query" source: | map(filter(headers.reply_to, diff --git a/insights/headers/mismatched_from_return_path.yml b/insights/headers/mismatched_from_return_path.yml index ff91e842db5..d891ad80560 100644 --- a/insights/headers/mismatched_from_return_path.yml +++ b/insights/headers/mismatched_from_return_path.yml @@ -1,4 +1,4 @@ -name: "Mismatched From and Return-Path" +name: "Mismatched Sender (From) and Return-Path" type: "query" source: | filter([headers.return_path.email], diff --git a/insights/headers/suspicious_recipient_pattern.yml b/insights/headers/suspicious_recipient_pattern.yml index 270444a77a6..72f52f9e5ea 100644 --- a/insights/headers/suspicious_recipient_pattern.yml +++ b/insights/headers/suspicious_recipient_pattern.yml @@ -1,6 +1,6 @@ # name: "Suspicious Recipient pattern" -name: "To matches From but not Return-Path" -description: "To is the same as the From with a different Return-Path" +name: "To matches Sender (From) but not Return-Path" +description: "To is the same as the sender with a different Return-Path" references: - "https://docs.sublimesecurity.com/docs/how-to-write-a-rule-for-a-phishing-attack" type: "query"