From 9a5cbba7d693b58a493bee22771032d8e6b3d935 Mon Sep 17 00:00:00 2001
From: fail-open <72417455+fail-open@users.noreply.github.com>
Date: Tue, 2 Jan 2024 10:19:48 -0500
Subject: [PATCH] Update ms-exchange-user-enum.yaml

handle underscores in extractor
---
 http/misconfiguration/ms-exchange-user-enum.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/http/misconfiguration/ms-exchange-user-enum.yaml b/http/misconfiguration/ms-exchange-user-enum.yaml
index ae17add9ab..dc26c065c1 100644
--- a/http/misconfiguration/ms-exchange-user-enum.yaml
+++ b/http/misconfiguration/ms-exchange-user-enum.yaml
@@ -36,6 +36,6 @@ http:
         part: header
         group: 1
         regex:
-          - '(?i)Email=([A-Za-z0-9@%.-]+)'
+          - '(?i)Email=([A-Za-z0-9@%.-_]+)'
 
 # digest: 4a0a00473045022047f3fcaeec7ba32081ea40264abacc7be7ca55431bed8b2e842c20c6cd5ff0b0022100ddc679fb703c5fee168620fa4656045fe6a6bf3cbffb3b0af3475246e58ef9d8:922c64590222798bb761d5b6d8e72950