FedEx Billing phishing email with Fedex_tax_receipt.zip attachment (Sirius)
Detects inbound phishing emails using a FedEx delivery/tax receipt lure containing a ZIP archive attachment, matching known campaign characteristics.
Microsoft Sentinel (KQL)

