Skip to content

Commit

Permalink
Sync from PR#2255
Browse files Browse the repository at this point in the history
Create impersonation_chrome_web_store_policy.yml by @zoomequipd
#2255
Source SHA ba363c8
Triggered by @zoomequipd
  • Loading branch information
Sublime Rule Testing Bot committed Jan 2, 2025
1 parent 089b02d commit 0369ab1
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions detection-rules/impersonation_chrome_web_store_policy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,6 @@ source: |
or strings.icontains(body.html.raw,
'<div style="background-color:rgb(65,132,243);padding:50px 20px 0px">'
)
or strings.icount(body.html.display_text, 'Chrome Web Store') >= 3
or regex.icontains(body.html.display_text,
'Item name: [^\s]+ security extension'
)
Expand Down Expand Up @@ -76,4 +75,4 @@ detection_methods:
- "URL analysis"
id: "4a98f283-8cc6-5864-bafb-e1908d0a5a8b"
testing_pr: 2255
testing_sha: 2053bcf7ff5c688996ca2d8eea98314e05a2d721
testing_sha: ba363c8f980ad5d7cfaf33985a98a7c5ed7f99cd

0 comments on commit 0369ab1

Please sign in to comment.