Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects email from a new hire (within 30 days of hire date) combining personal-crisis pretext language with an explicit request to use a personal or unmanaged device, corroborated by a non-compliant or untrusted device sign-in, consistent with PurpleDelta's device-substitution social-engineering pattern.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
107