Update attachment_qr_code_suspicious_components.yml

sublime-security · Sep 28, 2023 · c3bd2a1 · c3bd2a1
1 parent b12b784
commit c3bd2a1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/detection-rules/attachment_qr_code_suspicious_components.yml b/detection-rules/attachment_qr_code_suspicious_components.yml
@@ -51,12 +51,14 @@ source: |
 attack_types:
   - "Credential Phishing"
 tactics_and_techniques:
-  - "Impersonation: Brand"
   - "QR code"
   - "Social engineering"
 detection_methods:
   - "Computer Vision"
   - "Header analysis"
+  - "Natural Language Understanding"
   - "QR code analysis"
   - "Sender analysis"
+  - "URL analysis"
+  - "URL screenshot"
 id: "ed0f772a-6543-5947-80d1-55a11ea63074"