Skip to content

Update impersonation_github.yml #3452

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 3, 2025
Merged

Update impersonation_github.yml #3452

merged 1 commit into from
Nov 3, 2025

Conversation

@markmsublime
Copy link
Member

@markmsublime markmsublime commented Oct 31, 2025

Description

FP negation for legitimate messages related to PR changes requested/updates in the PR cycle.

Associated samples

Associated hunts

  • Hunt 1 - inverse hunt, showing all matches that do have the header that will be negated. A ton of FPs in L30D

@markmsublime markmsublime requested a review from a team as a code owner October 31, 2025 16:34
@markmsublime markmsublime added the review-needed Indicates that a PR is waiting for review label Oct 31, 2025
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Oct 31, 2025
github-actions bot added a commit that referenced this pull request Oct 31, 2025
@github-actions
[PR #3452] added rule: Brand impersonation: Github
401d02f
@IndiaAce IndiaAce added this pull request to the merge queue Nov 3, 2025
Merged via the queue into main with commit c1d1592 Nov 3, 2025
4 checks passed
@IndiaAce IndiaAce deleted the markmsublime-patch-3 branch November 3, 2025 13:30
github-actions bot added a commit that referenced this pull request Nov 3, 2025
@github-actions
[PR #3452] Delete detection rule
ac26821
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@IndiaAce IndiaAce IndiaAce approved these changes

Assignees

No one assigned

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@markmsublime @IndiaAce