Display Name 'Monitoring' Spoofing from gasparinutrition.com — T1036.005
Detects incoming emails that claim to be from a 'Monitoring' display name associated with the gasparinutrition.com domain or specific accounting sender address, which may indicate a spearphishing or impersonation attempt.
CQL

