Analytics BIOC
Informational
✕
Email marked as spam and bulk based on Spam Confidence Level and Bulk Complaint Level values
The Spam Confidence Level (SCL) and Bulk Complaint Level (BCL) values, detected in the email's antispam headers, indicate that a message is more likely to be spam.
- Module:
- Email Security
- Licensed by:
- Email Security
- Data source:
- Microsoft 365 Emails
ATT&CK tactics: Reconnaissance (TA0043) Initial Access (TA0001)
ATT&CK techniques: Phishing for Information (T1598) Phishing (T1566)
Detector tags: Spam
Attacker's goals:
Achieve financial gain, distribute malware, or phish for sensitive information through mass unsolicited emails.
Investigative actions:
Examine email headers to trace origins and check for signs of spoofing. Analyze the email content for spam indicators like suspicious links and aggressive marketing language. Monitor further actions taken, such as file downloads or access to potentially malicious links.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day
4 variations:
- Email with high Spam Confidence Level and Bulk Complaint Level values Informational
- Email with high Spam Confidence Level or Bulk Complaint Level values Informational
- Email with medium Spam Confidence Level and Bulk Complaint Level values Informational
- Email with medium Spam Confidence Level or Bulk Complaint Level values Informational