+
+#Water hack
+header __KAM_WATERHACK1 Subject =~ /Water Hack/i
+body __KAM_WATERHACK2 /water hack/i
+
+meta KAM_WATERHACK (__KAM_WATERHACK1 + __KAM_WATERHACK2 + KAM_SHORT >= 3)
+describe KAM_WATERHACK Diet Scams
+score KAM_WATERHACK 5.0
+
+#Sendgrid Exploits
+header __KAM_SENDGRID1 EnvelopeFrom =~ /\@u\d+\.wl\d+\.sendgrid\.net/i
+header __KAM_SENDGRID2 Received =~ /outbound\-mail\.sendgrid\.net \[/i
+
+meta KAM_SENDGRID (HEADER_FROM_DIFFERENT_DOMAINS + (__KAM_SENDGRID1 + __KAM_SENDGRID2 >= 1) >= 2)
+describe KAM_SENDGRID Sendgrid being exploited by scammers
+score KAM_SENDGRID 2.0
+
+meta KAM_SENDGRID2 (KAM_SENDGRID + TO_IN_SUBJ >= 2)
+describe KAM_SENDGRID2 Sendgrid being exploited by scammers
+score KAM_SENDGRID2 2.0
+
+#Political Spam
+header __KAM_2020_1 Subject =~ /Re-?elect Trump/i
+body __KAM_2020_2 /T-?shirt/i
+
+meta KAM_2020 (__KAM_2020_1 + __KAM_2020_2 + FREEMAIL_FROM >= 3)
+describe KAM_2020 2020 Political Spams
+score KAM_2020 5.0
+