Sublime Security medium experimental mql
Service abuse: Calendly callback scam detection
Detects inbound messages from Calendly's notification system that contain callback scam content, as identified through natural language processing with medium or high confidence levels.
Detection Logic
type.inbound
and sender.email.email in (
"no-reply@calendly.com",
"notifications@calendly.com"
)
and any(ml.nlu_classifier(body.current_thread.text).intents,
.name == "callback_scam" and .confidence != "low"
)Field Validations
Loading…
Comments (0)
Loading comments...