Enhanced message groups: Improving efficiency in email incident response · Blog · Sublime Security
ID: c29a9e21-2480-5dcd-be8d-2a2fa0b87080
STIX ID: report--c29a9e21-2480-5dcd-be8d-2a2fa0b87080
Feed Name: Sublime Security Blog
Sublime updated its email message-grouping system by moving from exact-content hashing to fragment-based set similarity (using preprocessing and techniques like MinHash) to better detect and group highly similar but varied phishing or campaign messages; this enables automated group-wide remediation, reduces alert fatigue, and speeds analyst investigations and incident response.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.