Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enhancement for Exchange forwarding rule #38063

Open
wants to merge 8 commits into
base: master
Choose a base branch
from
Open

Enhancement for Exchange forwarding rule #38063

wants to merge 8 commits into from
+307 −277

Conversation

karinafishman
Copy link
Contributor

@karinafishman karinafishman commented Jan 9, 2025 •
edited
Loading

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

fixes: https://jira-dc.paloaltonetworks.com/browse/CIAC-12387

Description

Added the following detectors to the Exchange forwarding rule playbook

Exchange email-hiding transport rule based on message keywords
Suspicious Exchange email-hiding transport rule
Exchange transport forwarding rule configured
Suspicious Exchange transport forwarding rule configured
Possible BEC Exchange email-hiding inbox rule

Must have

  • Tests
  • Documentation

@ShirleyDenkberg
Copy link
Contributor

@karinafishman Doc review completed.

@karinafishman karinafishman requested a review from AdiPeret January 9, 2025 12:31
@karinafishman karinafishman added the bypass.url Whether to create build bucket, add this label for marketplace.bootstrap.bypass.url label Jan 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ShirleyDenkberg ShirleyDenkberg ShirleyDenkberg left review comments

@AdiPeret AdiPeret Awaiting requested review from AdiPeret

@tomer-pan tomer-pan Awaiting requested review from tomer-pan

At least 1 approving review is required to merge this pull request.

Assignees

@ShirleyDenkberg ShirleyDenkberg

Labels
bypass.url Whether to create build bucket, add this label for marketplace.bootstrap.bypass.url docs-approved
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@karinafishman @ShirleyDenkberg