-
Notifications
You must be signed in to change notification settings - Fork 93
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update link_credential_phishing_cloud_service.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4523
opened May 21, 2026 by
D-Bolton
Member
Loading…
Update brand_impersonation_irs.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4521
opened May 21, 2026 by
markmsublime
Member
Loading…
Update impersonation_benefits_enrollment.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4520
opened May 20, 2026 by
MSAdministrator
Member
Loading…
Update credential_phishing_suspicious_subject_nlu_financial_urgent.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4519
opened May 20, 2026 by
cybher0808
Member
Loading…
Add first_name/last_name concat matching to org_vips body/subject rules
in-test-rules
PR is in our testing suite to collect telemetry
#4515
opened May 20, 2026 by
IndiaAce
Member
Loading…
Create brand_impersonation_morgan_stanley.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4514
opened May 20, 2026 by
JFarina5
Member
Loading…
Add first_name/last_name concat matching to org_vips sender rules
in-test-rules
PR is in our testing suite to collect telemetry
#4513
opened May 20, 2026 by
IndiaAce
Member
Loading…
Update attachment_adobe_image_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4512
opened May 20, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_cred_theft_external_domains.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4511
opened May 20, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_doc_lure_external_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4510
opened May 19, 2026 by
MSAdministrator
Member
Loading…
Create link_self_sender_cred_theft_sus_tlds.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4507
opened May 19, 2026 by
MSAdministrator
Member
Loading…
Update credential_phishing_generic_document_sharing.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4506
opened May 19, 2026 by
JFarina5
Member
Loading…
Update link_fake_storage_alert.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4505
opened May 19, 2026 by
JFarina5
Member
Loading…
Update regex string in BEC w/ mobile soliciation
in-test-rules
PR is in our testing suite to collect telemetry
#4504
opened May 18, 2026 by
missingn0pe
Member
Loading…
Create link_self_sender_cred_theft_config_placeholder.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4503
opened May 18, 2026 by
D-Bolton
Member
Loading…
Update Emp Imp Payroll Fraud rule to look for SDN in subject as well
in-test-rules
PR is in our testing suite to collect telemetry
#4499
opened May 18, 2026 by
missingn0pe
Member
Loading…
Create rule: Generic Financial Document Template
in-test-rules
PR is in our testing suite to collect telemetry
#4498
opened May 15, 2026 by
missingn0pe
Member
Loading…
Create headers_x_source_auth_sender_mismatch.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4497
opened May 15, 2026 by
D-Bolton
Member
Loading…
Create link_storage_google_slugstamp.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4496
opened May 15, 2026 by
zoomequipd
Member
•
Draft
Create link_storage_google_drive.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4495
opened May 15, 2026 by
zoomequipd
Member
•
Draft
Added new rule for detecting rating solicitation scams
review-needed
Indicates that a PR is waiting for review
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#4492
opened May 15, 2026 by
jacob-mazurkiewicz
Loading…
Create greeting_request_body.yml detection rule
in-test-rules
PR is in our testing suite to collect telemetry
#4491
opened May 15, 2026 by
cybher0808
Member
Loading…
Update brand_impersonation_aaa.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4488
opened May 14, 2026 by
cybher0808
Member
Loading…
Create impersonation rule for AFP
in-test-rules
PR is in our testing suite to collect telemetry
#4477
opened May 12, 2026 by
missingn0pe
Member
Loading…
Previous Next
ProTip!
Filter pull requests by the default branch with base:main.