Skip to content

Conversation

@MSAdministrator
Copy link
Member

Description

In addition to this rule update for Impact we identified that they are also using calendar invites with abnormal location values within the ICS invite.

Associated samples

  • Sample 1
  • Sample 2

Associated hunts

@MSAdministrator MSAdministrator requested a review from a team as a code owner January 22, 2026 19:09
@MSAdministrator MSAdministrator self-assigned this Jan 22, 2026
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Jan 22, 2026
github-actions bot added a commit that referenced this pull request Jan 22, 2026
@MSAdministrator MSAdministrator added the review-needed Indicates that a PR is waiting for review label Jan 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant