ThreatIocMaliciousFlag

Threat ioc malicious flag

Values

mlops_ioc_email_body_has_detection_obfuscation

mlops_ioc_email_body_mentions_bitcoin

mlops_ioc_email_body_mentions_expire

mlops_ioc_email_body_mentions_fax_keywords

mlops_ioc_email_body_mentions_invoice

mlops_ioc_email_body_mentions_password

mlops_ioc_email_body_mentions_urgent

mlops_ioc_email_body_mentions_urgency_keywords

mlops_ioc_email_body_mentions_webinar

mlops_ioc_email_body_mentions_wetransfer

mlops_ioc_email_body_mentions_remittance

mlops_ioc_email_body_mentions_voicemail

mlops_ioc_email_body_mentions_password_and_expire

mlops_ioc_email_body_mentions_microsoft_and_payment

mlops_ioc_email_body_mentions_nigerian_keywords

mlops_ioc_email_body_mentions_large_sums_of_money

mlops_ioc_email_body_mentions_advance_fee_keywords

mlops_ioc_email_body_mentions_money_transfer_keywords

mlops_ioc_email_body_mentions_lottery_scam_keywords

mlops_ioc_email_attachments_type_html

mlops_ioc_email_attachments_type_pdf

mlops_ioc_email_attachments_type_eml

mlops_ioc_email_attachments_type_doc

mlops_ioc_email_attachments_type_compressed

mlops_ioc_email_attachments_type_executable

mlops_ioc_email_attachments_type_macro_enabled

mlops_ioc_email_attachments_ms_removed

mlops_ioc_email_domain_in_subject

mlops_ioc_email_headers_scl

mlops_ioc_email_hops_count

mlops_ioc_email_receiver_alias_in_body

mlops_ioc_email_receiver_alias_in_sender

mlops_ioc_email_receiver_alias_in_subject

mlops_ioc_email_refers_to_spamlist

mlops_ioc_enrichments_scl

mlops_ioc_email_headers_x_forefront_antispam_report_cat_phish

mlops_ioc_email_headers_x_forefront_antispam_report_cat_hphish

mlops_ioc_email_headers_x_forefront_antispam_report_cat_hspm

mlops_ioc_email_headers_x_forefront_antispam_report_cat_spm

mlops_ioc_email_headers_x_forefront_antispam_report_cat_dimp

mlops_ioc_email_headers_x_forefront_antispam_report_cat_uimp

mlops_ioc_email_sender_name_has_homoglyphs

mlops_ioc_email_sender_name_has_phone_number

mlops_ioc_email_sender_name_has_email

mlops_ioc_email_sender_name_has_authority_impersonation

mlops_ioc_email_receivers_all_in_bcc

mlops_ioc_email_sender_address_matches_receiver_address

mlops_ioc_email_sender_address_free_service

mlops_ioc_email_subject_many_upper_case_chars

mlops_ioc_email_subject_has_receiver_alias

mlops_ioc_email_subject_has_receiver_domain

mlops_ioc_email_subject_has_receiver_email