KQL - Email Subject w/ Numerical Pattern

Udi B@Udi

•updated Aug 20, 2026•1•0•2

This rule detects email communications where the subject line contains numerical patterns matching standard credit card number formats (13-16 digits, or spaced/hyphenated variations). The purpose is to identify potential unauthorized transmission of sensitive financial data (PII/payment information) via email.