About aborgoENGIE

Hello all,   We want to create a pre-process rule to drop all Phishing incident without [Phish Alert] inside the email subject.   We're creating the following rule   type equals Phishing AND emailto equals test@test.ts AND emailsubject contains [Phish Alert]   Testing with the following JSON:   { "type":"Phishing", "emailsubject":"[Phish Alert] test preprocess rule", "emailto":"test@test.ts" }   It doesn't work:   With only "type equals Phishing" it works. But if we had anything else it stops working.   For example only with: type equals Phishing AND firstname equals Alexandre   And the following JSON: { "type":"Phishing", "firstname":"Alexandre", "emailsubject":"[Pish Alert] test preprocess rule", "emailto":"test@test.ts" }   It doesn't work.   Can you help us please? Am I missing somehing or is there a problem ?   Thanks for all help.   Best regards, Alexandre Borgo   ... View more