Burst of 'Payment Transaction Failed Reminder' emails (StyleSmuggler)
Detects a high volume of outbound emails (more than 20 within a one-hour window) from a single sender containing the subject line 'Payment Transaction Failed Reminder', which is a common pattern for phishing or social engineering campaigns.
Microsoft Sentinel (KQL)

