Skip to content

Pull requests: sublime-security/sublime-rules

Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort

Pull requests list

Update rule logic in-test-rules PR is in our testing suite to collect telemetry
#3477 opened Nov 4, 2025 by missingn0pe Loading…
Create attachment_pdf_microsoft_purview_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry
#3476 opened Nov 4, 2025 by D-Bolton Loading…
Updating Fake voicemail notification (untrusted sender) regex in-test-rules PR is in our testing suite to collect telemetry
#3475 opened Nov 4, 2025 by MSAdministrator Loading…
Create headers_mailer_contains_hidden_content.yml in-test-rules PR is in our testing suite to collect telemetry
#3474 opened Nov 4, 2025 by D-Bolton Loading…
Create attachment_docx_hyperlink_targeting_recipient.yml in-test-rules PR is in our testing suite to collect telemetry
#3472 opened Nov 4, 2025 by D-Bolton Loading…
Add detection rule for 7z archives containing RAR files in-test-rules PR is in our testing suite to collect telemetry
#3471 opened Nov 4, 2025 by morriscode Loading…
convert to subject.base
#3470 opened Nov 4, 2025 by zoomequipd Draft
Creating a rule from a runner to look for suspected thread hijacking and financial motivation in-test-rules PR is in our testing suite to collect telemetry
#3466 opened Nov 3, 2025 by IndiaAce Loading…
Update impersonation_social_security_admin.yml in-test-rules PR is in our testing suite to collect telemetry
#3465 opened Nov 3, 2025 by markmsublime Loading…
Refine regex patterns for spam detection rules in-test-rules PR is in our testing suite to collect telemetry
#3463 opened Nov 3, 2025 by missingn0pe Loading…
Update comp_review_qr_attached_eml.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3461 opened Nov 3, 2025 by zoomequipd Loading…
Update impersonation_dhl.yml in-test-rules PR is in our testing suite to collect telemetry
#3460 opened Nov 3, 2025 by markmsublime Loading…
Create brand_impersonation_paperlesspost.yml in-test-rules PR is in our testing suite to collect telemetry
#3457 opened Oct 31, 2025 by zoomequipd Loading…
Resolve FNs for sengrid impersonation in-test-rules PR is in our testing suite to collect telemetry
#3454 opened Oct 31, 2025 by IndiaAce Loading…
Update credential_phishing_esign_document_notification.yml in-test-rules PR is in our testing suite to collect telemetry
#3446 opened Oct 30, 2025 by morriscode Loading…
Enhance USPS impersonation detection rule logic in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3445 opened Oct 30, 2025 by peterdj45 Loading…
Create first pass of meta business abuse rule hunting-required Hunts needed to validate rule efficacy in-test-rules PR is in our testing suite to collect telemetry test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3443 opened Oct 29, 2025 by IndiaAce Loading…
Update extortion detection confidence criteria in-test-rules PR is in our testing suite to collect telemetry
#3441 opened Oct 29, 2025 by missingn0pe Loading…
Add regex check for upgrade keywords in alerts in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3440 opened Oct 28, 2025 by peterdj45 Loading…
LWescott Update credential_phishing_esign_document_notification.yml in-test-rules PR is in our testing suite to collect telemetry
#3438 opened Oct 28, 2025 by IndiaAce Loading…
Add patterns for AuthentiSign and e-Verify Doc in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3431 opened Oct 22, 2025 by peterdj45 Loading…
Create attachment_creditcard_application_with_whatsapp.yml in-test-rules PR is in our testing suite to collect telemetry
#3428 opened Oct 22, 2025 by IndiaAce Loading…
Update rule name and description for sender domain in-test-rules PR is in our testing suite to collect telemetry
#3426 opened Oct 22, 2025 by peterdj45 Loading…
Update link_microsoft_low_reputation.yml in-test-rules PR is in our testing suite to collect telemetry
#3425 opened Oct 21, 2025 by peterdj45 Loading…
New rule (Spam): Mastercard promotional content in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3416 opened Oct 17, 2025 by aidenmitchell Loading…
ProTip! Mix and match filters to narrow down what you’re looking for.