Skip to content

Add snowflake warninglist - #464

Open
OktayAlver wants to merge 1 commit into
MISP:mainfrom
OktayAlver:add-snowflake
Open

OktayAlver wants to merge 1 commit into
MISP:mainfrom
OktayAlver:add-snowflake

Conversation

@OktayAlver

Copy link
Copy Markdown

Snowflake account, Snowsight and app hostnames live under snowflakecomputing.com, snowflake.app and snowflake.com (https://docs.snowflake.com/en/sql-reference/functions/system_allowlist). Account names are customer-chosen, so they regularly contain bank or brand keywords and trigger Certificate Transparency phishing detectors. About a thousand such hostnames were flagged by one CT-based detector over three months.

Snowflake account, Snowsight and app hostnames live under
snowflakecomputing.com, snowflake.app and snowflake.com
(https://docs.snowflake.com/en/sql-reference/functions/system_allowlist).
Account names are customer-chosen, so they regularly contain bank or
brand keywords and trigger Certificate Transparency phishing detectors.
About a thousand such hostnames were flagged by one CT-based detector
over three months.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DmZwJGTUu1JHKEwVrenSg5

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant