-
Notifications
You must be signed in to change notification settings - Fork 100
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update suspicious_request_for_quote_or_purchase.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4908
opened Jul 16, 2026 by
cybher0808
Member
Loading…
Update link_credential_cloud_service.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4906
opened Jul 16, 2026 by
cybher0808
Member
Loading…
Create link_susp_html_mirrored_subject.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4905
opened Jul 16, 2026 by
keaton-sublime
Member
Loading…
Create attachment_office_doc_image_link_self_service.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4903
opened Jul 15, 2026 by
zoomequipd
Member
Loading…
Add detection rule for suspicious toll-free numbers
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4902
opened Jul 15, 2026 by
peterdj45
Member
Loading…
Create link_mixed_href_structure.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4899
opened Jul 15, 2026 by
keaton-sublime
Member
Loading…
Create attachment_targeted_docx_ack_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4897
opened Jul 15, 2026 by
keaton-sublime
Member
Loading…
Create attachment_ics_malformed_organizer_short_body.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4895
opened Jul 15, 2026 by
markmsublime
Member
Loading…
Include DLP discovery rules in MQL auto-format CI steps
#4891
opened Jul 15, 2026 by
aidenmitchell
Member
Loading…
1 task
Create link_javascript_obfuscation_redirect.yml
hunting-required
Hunts needed to validate rule efficacy
review-needed
Indicates that a PR is waiting for review
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4889
opened Jul 14, 2026 by
D-Bolton
Member
Loading…
Update impersonation_openai_payment_issues.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4878
opened Jul 13, 2026 by
JFarina5
Member
Loading…
Loop-invariant expressions PR
review-needed
Indicates that a PR is waiting for review
shared-samples:excluded:bulk_rules
test-rules:excluded:bulk_rules
Bulk rule update, excluded from test rules
#4869
opened Jul 10, 2026 by
JFarina5
Member
Loading…
Update recon_empty_message_uncommon_sender.yml - b2bh - Adding tracking pixel
in-test-rules
PR is in our testing suite to collect telemetry
#4868
opened Jul 10, 2026 by
missingn0pe
Member
Loading…
Create body_author_engagement_scam.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4864
opened Jul 10, 2026 by
keaton-sublime
Member
Loading…
Update observed IOC rules - 2026-07-17
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#4858
opened Jul 10, 2026 by
github-actions
Bot
Loading…
Update brand_impersonation_gemini.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4857
opened Jul 9, 2026 by
keaton-sublime
Member
•
Draft
Remove loop-invariant expressions in rules, exclusions and signals
hunting-required
Hunts needed to validate rule efficacy
review-needed
Indicates that a PR is waiting for review
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
test-rules:excluded:manual
Manually excluded from test-rules, either by adding this label or removing the in-test-rules label
#4854
opened Jul 9, 2026 by
peterdj45
Member
Loading…
Create open_redirect_pointing_to_new_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4849
opened Jul 9, 2026 by
D-Bolton
Member
Loading…
Create attachment_identity_confirmation_document_unlock.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4847
opened Jul 9, 2026 by
keaton-sublime
Member
•
Draft
Create open_redirect_gov_to_non_gov.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4846
opened Jul 9, 2026 by
D-Bolton
Member
Loading…
Create headers_unregistered_domain_via_zeptomail.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4844
opened Jul 9, 2026 by
D-Bolton
Member
Loading…
Create brand_impersonation_1password.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4840
opened Jul 8, 2026 by
markmsublime
Member
Loading…
Update credential_phishing_fake_email_quarantine_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4839
opened Jul 8, 2026 by
keaton-sublime
Member
Loading…
Create brand_impersonation_autodesk.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4824
opened Jul 7, 2026 by
markmsublime
Member
Loading…
Create service_abuse_cognitoforms_short_body.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4820
opened Jul 7, 2026 by
keaton-sublime
Member
Loading…
ProTip!
What’s not been updated in a month: updated:<2026-06-21.