Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
149 Open 4,221 Closed
149 Open 4,221 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Create self_sender_cred_theft_auth_failures.yml in-test-rules PR is in our testing suite to collect telemetry
#4371 opened Apr 20, 2026 by IndiaAce Member Loading…
Update fake thread detection rules for references in-test-rules PR is in our testing suite to collect telemetry
#4370 opened Apr 20, 2026 by cybher0808 Member Loading…
Restructured "Attach: Sus Employee Lure" rule in-test-rules PR is in our testing suite to collect telemetry
#4369 opened Apr 17, 2026 by missingn0pe Member Loading…
Create detection rule for invoice previous thread in-test-rules PR is in our testing suite to collect telemetry
#4368 opened Apr 17, 2026 by cybher0808 Member Loading…
Create link_credential_phishing_cloud_service.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4367 opened Apr 17, 2026 by D-Bolton Member Loading…
Update headers_replyto_new_domain_nlu_request.yml in-test-rules PR is in our testing suite to collect telemetry
#4364 opened Apr 17, 2026 by IndiaAce Member Loading…
Add YARA rule compilation validation to CI
#4357 opened Apr 15, 2026 by aidenmitchell Member Loading…
1 of 2 tasks
2
Create attachment_pdf_base64_javascript_eval.yml
#4355 opened Apr 15, 2026 by keaton-sublime Member • Draft
Create impersonation_openai_payment_issues.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4354 opened Apr 15, 2026 by hadojae Member Loading…
1
Create attachment_pdf_CVE_2026_34621_lures.yml
#4352 opened Apr 15, 2026 by keaton-sublime Member • Draft
Create attachment_pdf_with_jsfck_yara.yml
#4351 opened Apr 15, 2026 by keaton-sublime Member • Draft
Update observed IOC rules - 2026-04-17 in-test-rules PR is in our testing suite to collect telemetry shared-samples:excluded:author_membership
#4350 opened Apr 15, 2026 by github-actions bot • Draft
3 tasks
7
Add "ICS Phishing" attack type to calendar/ICS rules shared-samples:excluded:bulk_rules test-rules:excluded:bulk_rules Bulk rule update, excluded from test rules
#4344 opened Apr 14, 2026 by aidenmitchell Member Loading…
1
Update brand_impersonation_robinhood.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4319 opened Apr 6, 2026 by cybher0808 Member Loading…
@cybher0808
Create body_spouse_fake_call.yml in-test-rules PR is in our testing suite to collect telemetry
#4317 opened Apr 6, 2026 by keaton-sublime Member • Draft
3
Create body_html_hidden_conversation.yml in-test-rules PR is in our testing suite to collect telemetry
#4308 opened Apr 3, 2026 by D-Bolton Member Loading…
Create body_ai_gen_credential_theft_suspect_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4304 opened Apr 3, 2026 by IndiaAce Member Loading…
Update qr_code_suspicious_indicators.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4301 opened Apr 2, 2026 by hadojae Member Loading…
1
Create callback_scam_file_extensions.yml in-test-rules PR is in our testing suite to collect telemetry
#4300 opened Apr 2, 2026 by cybher0808 Member Loading…
@cybher0808
Update fake_thread_suspicious_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4289 opened Apr 1, 2026 by IndiaAce Member Loading…
Refactor exclusion logic for low reputation links in-test-rules PR is in our testing suite to collect telemetry
#4281 opened Mar 31, 2026 by peterdj45 Member Loading…
Refine detection rules for SharePoint fake file shares in-test-rules PR is in our testing suite to collect telemetry
#4280 opened Mar 31, 2026 by peterdj45 Member Loading…
Create impersonate_hubspot_suspicious_content.yml in-test-rules PR is in our testing suite to collect telemetry
#4277 opened Mar 30, 2026 by IndiaAce Member Loading…
Negate SharePoint shares with Mimecast rewrites in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4276 opened Mar 30, 2026 by peterdj45 Member Loading…
4
Negate SharePoint file shares with Mimecast rewrites in-test-rules PR is in our testing suite to collect telemetry
#4275 opened Mar 30, 2026 by peterdj45 Member Loading…
ProTip! no:milestone will show everything without a milestone.