AiTM - "Code of Conduct" Lure Recognition (T1566.002)
Identifies inbound emails leveraging the HR-themed "Code of Conduct" or "Employee Policy" subjects often used to trigger the AiTM campaign.
Microsoft Sentinel (KQL)

Identifies inbound emails leveraging the HR-themed "Code of Conduct" or "Employee Policy" subjects often used to trigger the AiTM campaign.

Already have an account?