Custom detection-Emails with QR from non-prevalent senders

In this detection, we check the sender prevalence over the last 14 days and use the same to detect malicious activity via email containing QR code