-
Notifications
You must be signed in to change notification settings - Fork 79
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update rule logic
in-test-rules
PR is in our testing suite to collect telemetry
#3477
opened Nov 4, 2025 by
missingn0pe
Loading…
Create attachment_pdf_microsoft_purview_impersonation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3476
opened Nov 4, 2025 by
D-Bolton
Loading…
Updating Fake voicemail notification (untrusted sender) regex
in-test-rules
PR is in our testing suite to collect telemetry
#3475
opened Nov 4, 2025 by
MSAdministrator
Loading…
Create headers_mailer_contains_hidden_content.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3474
opened Nov 4, 2025 by
D-Bolton
Loading…
Create attachment_docx_hyperlink_targeting_recipient.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3472
opened Nov 4, 2025 by
D-Bolton
Loading…
Add detection rule for 7z archives containing RAR files
in-test-rules
PR is in our testing suite to collect telemetry
#3471
opened Nov 4, 2025 by
morriscode
Loading…
Creating a rule from a runner to look for suspected thread hijacking and financial motivation
in-test-rules
PR is in our testing suite to collect telemetry
#3466
opened Nov 3, 2025 by
IndiaAce
Loading…
Update impersonation_social_security_admin.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3465
opened Nov 3, 2025 by
markmsublime
Loading…
Refine regex patterns for spam detection rules
in-test-rules
PR is in our testing suite to collect telemetry
#3463
opened Nov 3, 2025 by
missingn0pe
Loading…
Update comp_review_qr_attached_eml.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3461
opened Nov 3, 2025 by
zoomequipd
Loading…
Update impersonation_dhl.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3460
opened Nov 3, 2025 by
markmsublime
Loading…
Create brand_impersonation_paperlesspost.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3457
opened Oct 31, 2025 by
zoomequipd
Loading…
Resolve FNs for sengrid impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#3454
opened Oct 31, 2025 by
IndiaAce
Loading…
Update credential_phishing_esign_document_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3446
opened Oct 30, 2025 by
morriscode
Loading…
Enhance USPS impersonation detection rule logic
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3445
opened Oct 30, 2025 by
peterdj45
Loading…
Create first pass of meta business abuse rule
hunting-required
Hunts needed to validate rule efficacy
in-test-rules
PR is in our testing suite to collect telemetry
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3443
opened Oct 29, 2025 by
IndiaAce
Loading…
Update extortion detection confidence criteria
in-test-rules
PR is in our testing suite to collect telemetry
#3441
opened Oct 29, 2025 by
missingn0pe
Loading…
Add regex check for upgrade keywords in alerts
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3440
opened Oct 28, 2025 by
peterdj45
Loading…
LWescott Update credential_phishing_esign_document_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3438
opened Oct 28, 2025 by
IndiaAce
Loading…
Add patterns for AuthentiSign and e-Verify Doc
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3431
opened Oct 22, 2025 by
peterdj45
Loading…
Create attachment_creditcard_application_with_whatsapp.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3428
opened Oct 22, 2025 by
IndiaAce
Loading…
Update rule name and description for sender domain
in-test-rules
PR is in our testing suite to collect telemetry
#3426
opened Oct 22, 2025 by
peterdj45
Loading…
Update link_microsoft_low_reputation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3425
opened Oct 21, 2025 by
peterdj45
Loading…
New rule (Spam): Mastercard promotional content
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3416
opened Oct 17, 2025 by
aidenmitchell
Loading…
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.