Stiaan van der Watt
@st1aan1 follower3 downloads6 copies2 likes65 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Platforms
1
MITRE Techniques
1
1
1
1
1
This rule identifies emails originating from sender addresses listed in a GitHub-hosted CSV file, which is explicitly named 'North-Korean-Emails'. The rule's purpose is to flag incoming emails that appear to be sent from individuals or entities associated with North Korea, based on the provided list of email addresses. This could indicate potential phishing, espionage, or other malicious activities originating from North Korean threat actors.
