Skip to content

Update credential_theft_cloud_storage_impersonation.yml#4315

Merged
markmsublime merged 1 commit into
mainfrom
JFarina5.FN.ESC-10100.cred.theft.cloud.storage
Apr 9, 2026
Merged

Update credential_theft_cloud_storage_impersonation.yml#4315
markmsublime merged 1 commit into
mainfrom
JFarina5.FN.ESC-10100.cred.theft.cloud.storage

Conversation

@JFarina5
Copy link
Copy Markdown
Member

@JFarina5 JFarina5 commented Apr 6, 2026

Description

Increasing length logic for body.current_thread.links

Associated samples

Associated hunts

Multi-Hunt located in ESC

@JFarina5 JFarina5 requested a review from a team April 6, 2026 19:27
@JFarina5 JFarina5 requested a review from a team as a code owner April 6, 2026 19:27
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Apr 6, 2026
github-actions Bot added a commit that referenced this pull request Apr 6, 2026
github-actions Bot added a commit that referenced this pull request Apr 6, 2026
…rsonation with credential theft indicators
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request Apr 8, 2026
…ersonation with credential theft indicators
@JFarina5
Copy link
Copy Markdown
Member Author

JFarina5 commented Apr 9, 2026

Pretty minor change, Hunt results look good and description has been updated. Marking r4r.

@JFarina5 JFarina5 added the review-needed Indicates that a PR is waiting for review label Apr 9, 2026
@markmsublime markmsublime added this pull request to the merge queue Apr 9, 2026
Merged via the queue into main with commit 1d7ca9a Apr 9, 2026
4 checks passed
@markmsublime markmsublime deleted the JFarina5.FN.ESC-10100.cred.theft.cloud.storage branch April 9, 2026 15:45
github-actions Bot added a commit that referenced this pull request Apr 9, 2026
github-actions Bot added a commit to IndiaAce/sublime-rules that referenced this pull request Apr 9, 2026
IndiaAce pushed a commit to IndiaAce/sublime-rules that referenced this pull request May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants