Watchlist
15 active patterns. Add new patterns for Manny to sweep.
| ID | Type | Pattern | Auto-found | Last update | Cadence | Notes |
|---|---|---|---|---|---|---|
| WL-001 | brand-domain | example-corp.com | 47 | 2026-05-05 18:00Z | real-time | Primary corporate domain. Includes confusables. |
| WL-002 | executive-name | exec:CEO-redacted | 12 | 2026-05-05 17:31Z | real-time | CEO. Extra dox-pattern weighting on this watcher. |
| WL-003 | executive-name | exec:CFO-redacted | 5 | 2026-05-05 13:02Z | real-time | CFO. |
| WL-004 | employee-email | *@example.com | 134 | 2026-05-05 18:42Z | hourly | All employee mailboxes, hashed match. |
| WL-005 | product-name | ExampleCorp Vault | 8 | 2026-05-04 22:00Z | hourly | Flagship product. Trademark-bait. |
| WL-006 | customer-domain | tenant-redacted-2.example.org | 21 | 2026-05-03 08:21Z | real-time | High-value enterprise tenant. Active investigation. |
| WL-007 | customer-domain | tenant-redacted-7.example.org | 9 | 2026-05-04 19:30Z | hourly | Mid-market tenant. |
| WL-008 | api-endpoint | api.example-corp.com/v2/* | 3 | 2026-05-03 15:42Z | hourly | Public API surface; watch for token leaks. |
| WL-009 | api-endpoint | internal.example-corp.com/* | 1 | 2026-05-02 13:12Z | real-time | Internal-only host — any external mention is signal. |
| WL-010 | brand-domain | example-corp-support.* | 18 | 2026-05-04 17:20Z | hourly | Support-themed lookalikes (common phish pivot). |
| WL-011 | brand-domain | example-corp-login.* | 22 | 2026-05-05 16:11Z | real-time | Login-themed lookalikes. |
| WL-012 | executive-name | exec:CTO-redacted | 2 | 2026-05-02 22:10Z | daily | CTO, lower threat profile historically. |
| WL-013 | product-name | ExampleCorp Sentinel | 4 | 2026-05-01 11:02Z | daily | Newer product line. |
| WL-014 | employee-email | *@contractors.example.com | 16 | 2026-05-01 16:18Z | daily | Contractor mailboxes, hashed match. |
| WL-015 | brand-domain | examplecorp-careers.* | 6 | 2026-05-01 20:40Z | weekly | Recruiting-phish lookalike pattern. |