-
Notifications
You must be signed in to change notification settings - Fork 96
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update body_bec_mobile_solicitation_reply_thread.yml
#4543
opened May 26, 2026 by
JFarina5
Member
Loading…
Create attachment_pdf_base64_javascript_yara.yml
#4542
opened May 26, 2026 by
keaton-sublime
Member
•
Draft
Update link_fake_storage_alert.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4540
opened May 26, 2026 by
JFarina5
Member
Loading…
Update impersonation_usps.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4537
opened May 26, 2026 by
JFarina5
Member
Loading…
Update close the loop with reporter automation to trigger on asa complete
review-needed
Indicates that a PR is waiting for review
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#4536
opened May 26, 2026 by
ameliagapin
Loading…
Create link_numeric_ip_obfuscation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4535
opened May 26, 2026 by
JFarina5
Member
Loading…
Create brand_impersonation_figma_doc_access_overlay.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4534
opened May 22, 2026 by
MSAdministrator
Member
Loading…
Modify self-sender rule to detect suspicious links
in-test-rules
PR is in our testing suite to collect telemetry
#4529
opened May 22, 2026 by
peterdj45
Member
Loading…
Refactor keywords in Cloud service with credential theft language
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4527
opened May 21, 2026 by
cybher0808
Member
Loading…
Update impersonation_fake_copyright_infringement_notice_from_unsolicited_sender.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4526
opened May 21, 2026 by
missingn0pe
Member
Loading…
Update link_credential_phishing_cloud_service.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4523
opened May 21, 2026 by
D-Bolton
Member
Loading…
Update brand_impersonation_irs.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4521
opened May 21, 2026 by
markmsublime
Member
Loading…
Update impersonation_benefits_enrollment.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4520
opened May 20, 2026 by
MSAdministrator
Member
Loading…
Update credential_phishing_suspicious_subject_nlu_financial_urgent.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4519
opened May 20, 2026 by
cybher0808
Member
Loading…
Add first_name/last_name concat matching to org_vips body/subject rules
in-test-rules
PR is in our testing suite to collect telemetry
#4515
opened May 20, 2026 by
IndiaAce
Member
Loading…
Create brand_impersonation_morgan_stanley.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4514
opened May 20, 2026 by
JFarina5
Member
Loading…
Add first_name/last_name concat matching to org_vips sender rules
in-test-rules
PR is in our testing suite to collect telemetry
#4513
opened May 20, 2026 by
IndiaAce
Member
Loading…
Update attachment_adobe_image_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4512
opened May 20, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_doc_lure_external_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4510
opened May 19, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_cred_theft_sus_tlds.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4507
opened May 19, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_cred_theft_config_placeholder.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4503
opened May 18, 2026 by
D-Bolton
Member
Loading…
Update Emp Imp Payroll Fraud rule to look for SDN in subject as well
in-test-rules
PR is in our testing suite to collect telemetry
#4499
opened May 18, 2026 by
missingn0pe
Member
Loading…
Create rule: Generic Financial Document Template
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4498
opened May 15, 2026 by
missingn0pe
Member
Loading…
Create headers_x_source_auth_sender_mismatch.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4497
opened May 15, 2026 by
D-Bolton
Member
Loading…
Previous Next
ProTip!
Follow long discussions with comments:>50.