Update impersonation_sharepoint_fake_file_share.yml (#2213)

sublime-security · Dec 13, 2024 · eaff610 · eaff610
1 parent 4e8a5eb
commit eaff610
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/detection-rules/impersonation_sharepoint_fake_file_share.yml b/detection-rules/impersonation_sharepoint_fake_file_share.yml
@@ -264,7 +264,7 @@ source: |
     or sender.email.domain.root_domain not in $high_trust_sender_root_domains
   )
   and (
-    (not profile.by_sender().solicited)
+    not profile.by_sender_email().solicited
     or (
       profile.by_sender().any_messages_malicious_or_spam
       and not profile.by_sender().any_false_positives