Hunting for sender patterns

In this detection approach, we correlate email from non-prevalent senders in the organization with impersonation intents