YARA RULE - INTERNAL vs. EXTERNAL Sender?

Any help would be greatly appreciated.

We have one domain, I want to create a YARA rule that will flag emails where if the sender is from our domain it would add a tag in PhishER as “internal” and if the from email was not our domain it would read “External”.

Could someone assist me in writing this YARA rule?

Thanks,
Robert


Featured Webinars


Advanced Phishing and
Training

Monday 1:30 PM – 2:30 PM
» Learn More
Outlook Phish Alert Button
Tuesday 1:30 PM – 2:30 PM
» Learn More
Customizing Phishing Templates, Landing Pages, & Training Notifications
Wednesday 1:30 PM – 2:30 PM
» Learn More
Active Directory Integration
(ADI) Setup

Thursday 1:30 PM – 2:30 PM
» Learn More
Gold/Platinum/Diamond
Features

Friday 1:30 PM – 2:30 PM
» Learn More

Privacy Policy | Terms of Service