-
Notifications
You must be signed in to change notification settings - Fork 87
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add detection rule for SharePoint file sharing impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#4129
opened Mar 5, 2026 by
IndiaAce
Loading…
Create link_blogspot_explicit_romance_content.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4128
opened Mar 5, 2026 by
JFarina5
Loading…
Create fake_canada_taxrevenue_T4.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4126
opened Mar 5, 2026 by
cybher0808
Loading…
Create brand_impersonation_mcafee.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4125
opened Mar 5, 2026 by
markmsublime
Loading…
Add threat detection rules for acts of violence (batch 3)
in-test-rules
PR is in our testing suite to collect telemetry
#4123
opened Mar 5, 2026 by
zoomequipd
Loading…
Add threat detection rules for acts of violence (batch 2)
in-test-rules
PR is in our testing suite to collect telemetry
#4122
opened Mar 5, 2026 by
zoomequipd
Loading…
Add threat detection rules for acts of violence (batch 1)
in-test-rules
PR is in our testing suite to collect telemetry
#4121
opened Mar 5, 2026 by
zoomequipd
Loading…
Create sus_urllink_hTTPs.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4120
opened Mar 5, 2026 by
cybher0808
Loading…
Update sender_display_name_kindly.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4119
opened Mar 4, 2026 by
D-Bolton
Loading…
Create link_rfi_document_pattern.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4117
opened Mar 4, 2026 by
keaton-sublime
•
Draft
Update impersonation_vip_w2_request.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4116
opened Mar 4, 2026 by
D-Bolton
Loading…
Update brand_impersionation_zoom_lookalike.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4115
opened Mar 4, 2026 by
D-Bolton
Loading…
Create spam_sexually_explicit_with_emoji_from_freemail.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4114
opened Mar 4, 2026 by
D-Bolton
Loading…
Add detection rule for manipulated Outlook messages
in-test-rules
PR is in our testing suite to collect telemetry
#4111
opened Mar 4, 2026 by
IndiaAce
Loading…
Update impersonation_brand_wix.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4110
opened Mar 4, 2026 by
markmsublime
Loading…
Create service_abuse_google_oauth_with_suspicious_redirect_destinatio…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4107
opened Mar 3, 2026 by
hadojae
Loading…
Create cred_phish_displayurl_port.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4106
opened Mar 3, 2026 by
cybher0808
Loading…
Create link_google_drawings_new_sender.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4105
opened Mar 3, 2026 by
JFarina5
Loading…
[senderprofile] Removing Bulk Set 6
in-test-rules
PR is in our testing suite to collect telemetry
#4103
opened Mar 3, 2026 by
MSAdministrator
Loading…
[senderprofle] Remove Bulk Set 5
in-test-rules
PR is in our testing suite to collect telemetry
#4102
opened Mar 3, 2026 by
MSAdministrator
Loading…
Removing sender profile from sendgrid impersonation rule & the name
in-test-rules
PR is in our testing suite to collect telemetry
#4099
opened Mar 2, 2026 by
IndiaAce
Loading…
Create attachment_pdf_object_hash_fake_zoom_meeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4098
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create attachment_pdf_url_zoom_meeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4097
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.