Hunt – ASCII Smuggling & Phishing Evasion IOC
This rule monitors for inbound email activity containing sender domains or embedded URL domains known to be associated with malicious phishing campaigns. It flags emails matching a predefined list of suspicious sender domains or URLs that resolve to known malicious infrastructure.
Microsoft Sentinel (KQL)

