Spearphishing impersonating CSIS Indo-Pacific Forecast 2026 lure with sender spoofing
Detects spearphishing email impersonating the CSIS 'Indo-Pacific Forecast 2026' invitation-only event lure, gated on CSIS branding/display name combined with a sender domain that does not match csis.org.
Microsoft Sentinel (KQL)

