Skip to content

Update detection-rules.json - #117

Merged
JohnDuprey merged 9 commits into
CyberDrain:devfrom
Zacgoose:rules-update
Dec 20, 2025
Merged

JohnDuprey merged 9 commits into
CyberDrain:devfrom
Zacgoose:rules-update

Conversation

@Zacgoose

@Zacgoose Zacgoose commented Dec 20, 2025 •

Copy link
Copy Markdown
Contributor

fixes #116

KelvinTegelaar and others added 3 commits November 13, 2025 16:54
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Copilot AI review requested due to automatic review settings December 20, 2025 01:44
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the phishing detection rules configuration by bumping the version from 1.0.8 to 1.1.0 and refining regex patterns for Microsoft domain matching. The changes aim to improve domain pattern matching by replacing wildcard patterns with more specific character classes and adding support for new Microsoft authentication domains.

Key changes:

  • Added ciamlogin.com and powerbi.com domains to the trusted patterns
  • Refactored domain regex patterns from [^.]*\. to ([a-zA-Z0-9-]+\.)* for more precise subdomain matching
  • Updated version metadata and timestamp

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread rules/detection-rules.json Outdated
Comment thread rules/detection-rules.json Outdated
Comment thread rules/detection-rules.json Outdated
Comment thread rules/detection-rules.json Outdated
Comment thread rules/detection-rules.json
@Zacgoose Zacgoose closed this Dec 20, 2025
@Zacgoose

Copy link
Copy Markdown
Contributor Author

go away robot

@Zacgoose Zacgoose reopened this Dec 20, 2025
JohnDuprey and others added 4 commits December 19, 2025 20:59
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: John Duprey <jwd@johnwduprey.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: John Duprey <jwd@johnwduprey.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
@JohnDuprey
JohnDuprey merged commit a9843aa into CyberDrain:dev Dec 20, 2025
1 check passed
JohnDuprey added a commit that referenced this pull request Dec 20, 2025
* Update detection-rules.json

Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>

* Update detection-rules.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: John Duprey <jwd@johnwduprey.com>

* Update detection-rules.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: John Duprey <jwd@johnwduprey.com>

* Update rules/detection-rules.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>

* Update detection-rules.json

Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>

---------

Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Signed-off-by: John Duprey <jwd@johnwduprey.com>
Co-authored-by: KelvinTegelaar <49186168+KelvinTegelaar@users.noreply.github.com>
Co-authored-by: John Duprey <jwd@johnwduprey.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants