OpenPhish Domain Matches in Endpoint Network Telemetry

Nicholas Yovanovich@nicholas303030

•updated 3 days ago•5•0•25

Identifies devices that have communicated with domains present in the OpenPhish public phishing feed by comparing domains observed in DeviceNetworkEvents.RemoteUrl against domains extracted from the current OpenPhish feed.