AiTM - "Code of Conduct" Lure Recognition (T1566.002)

Identifies inbound emails leveraging the HR-themed "Code of Conduct" or "Employee Policy" subjects often used to trigger the AiTM campaign.