-
Notifications
You must be signed in to change notification settings - Fork 87
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Create link_apple_store_ai_advertising.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4101
opened Mar 3, 2026 by
zoomequipd
Loading…
Removing sender profile from sendgrid impersonation rule & the name
in-test-rules
PR is in our testing suite to collect telemetry
#4099
opened Mar 2, 2026 by
IndiaAce
Loading…
Create attachment_pdf_object_hash_fake_zoom_meeting.yml
#4098
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create attachment_pdf_url_zoom_meeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4097
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create brand_impersonation_zoom_span_obfuscation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4096
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create brand_impersonation_zoom_deception.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4095
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Add detection rule for AI-generated credential phishing
in-test-rules
PR is in our testing suite to collect telemetry
#4093
opened Mar 2, 2026 by
IndiaAce
Loading…
Update attachment_pdf_link_sus_lang.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4091
opened Feb 27, 2026 by
zoomequipd
Loading…
Update impersonation_vip_urgent_request.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4090
opened Feb 26, 2026 by
JFarina5
Loading…
Update impersonation_vip_bec_loose.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4088
opened Feb 26, 2026 by
JFarina5
Loading…
Create link_suspicious_email_contains_link_to_page_protected_by_captc…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4087
opened Feb 25, 2026 by
hadojae
Loading…
Create link_suspicious_email_link_resolves_page_containing_javascript…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4086
opened Feb 25, 2026 by
hadojae
Loading…
Create bec_fraud_self_reply_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4083
opened Feb 24, 2026 by
JFarina5
Loading…
Create attachment_pdf_proposal_cred_theft.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4079
opened Feb 24, 2026 by
zoomequipd
Loading…
Create attachment_pdf_email_table.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4077
opened Feb 24, 2026 by
zoomequipd
Loading…
Create attachment_pdf_bid_proposal_lure_with_credential_theft_indicat…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4076
opened Feb 24, 2026 by
hadojae
Loading…
Create attachment_pdf_obj_hash_hr_compensation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4069
opened Feb 20, 2026 by
JFarina5
Loading…
Create link_commonly_abused_web_service_redirecting_to_zip_file.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4068
opened Feb 20, 2026 by
hadojae
Loading…
Update suspicious_request_for_quote_or_purchase.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4067
opened Feb 20, 2026 by
markmsublime
Loading…
Create attachment_pdf_cred_theft_suspicious_replyto_custom_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4065
opened Feb 19, 2026 by
D-Bolton
Loading…
Create link_hidden_domain_using_at_symbol_with_suspicious_indicators.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4062
opened Feb 19, 2026 by
hadojae
Loading…
Create attachment_pdf_obj_hash_generic_invoice.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4060
opened Feb 19, 2026 by
JFarina5
Loading…
Update abuse_docsend_unsolicited_reply-to.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4059
opened Feb 19, 2026 by
markmsublime
Loading…
Previous Next
ProTip!
Add no:assignee to see everything that’s not assigned.