Sublime Security low experimental mql

Disposable sender email (unsolicited)

Sender is using a disposable email service and no one in our organization has ever sent them an email.

View Source

Detection Logic

type.inbound
and sender.email.domain.root_domain in $disposable_email_providers
and sender.email.email not in $recipient_emails

Field Validations

Loading…

Comments (0)

Loading comments...