diff --git a/rules/detection-rules.json b/rules/detection-rules.json index ad01d827..575fcacf 100644 --- a/rules/detection-rules.json +++ b/rules/detection-rules.json @@ -60,7 +60,8 @@ "^https:\\/\\/(?:[^/]*\\.)?zoom\\.us(/.*)?$", "^https:\\/\\/github\\.com(/.*)?$", "^https:\\/\\/[^/]*\\.github\\.com(/.*)?$", - "^https:\\/\\/[^/]*\\.github\\.io(/.*)?$" + "^https:\\/\\/[^/]*\\.github\\.io(/.*)?$", + "^https:\\/\\/(?:[^/]*\\.)?britishgas\\.co\\.uk(/.*)?$" ], "context_indicators": { "description": "Additional context that indicates legitimate discussion vs phishing",