// AUTO-GENERATED IOC LIST - DO NOT EDIT MANUALLY
// Managed by automated IOC system
type.inbound
and hash.sha256(sender.email.domain.domain) in (
'28b686d3c7b091ebdda1373f58a16635f4dacaaa748d0a4f2175273a09662770', // Malicious Sender - Multiple Lures spaning multiple days
'485e31e6b5bb45a44e24eb69ce3daafc6ea335b5d387e80684298a5397358840', // Observed compromised account
'6a6070cb3594362b3c54d21006450be34222dc578acbc97b357f946d8d564471', // Observed compromised account
'7606728ae9565e84698ddba62e40a35865ec7edbd5ca7710d8a7182768dc439d' // Observed compromised account
)
Playground
Test against your own EMLs or sample data.