Most Popular Detection 2026 – AI-Generated Mass Phishing Kit Impersonating Google/Brand Lures
This rule detects mass-distributed email phishing campaigns that impersonate Google branding. It identifies emails using Google-related sender display names or subjects that originate from non-Google domains and contain links to external, non-Google domains. The detection focuses on identifying suspicious patterns across multiple recipients rather than individual email signatures.
Microsoft Sentinel (KQL)
