-
Notifications
You must be signed in to change notification settings - Fork 101
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add detection rule office documents suspicious file sharing
in-test-rules
PR is in our testing suite to collect telemetry
#3409
opened Oct 15, 2025 by
morriscode
Member
Loading…
Create bec_previous_threaded_email_in_sender_local.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3246
opened Sep 17, 2025 by
morriscode
Member
Loading…
Create medium_link_abuse.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3244
opened Sep 16, 2025 by
peterdj45
Member
Loading…
Update credential_phishing_esign_document_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3446
opened Oct 30, 2025 by
morriscode
Member
Loading…
Create impersonation_charter_spectrum.yml
in-test-rules
PR is in our testing suite to collect telemetry
shared-samples:excluded:author_membership
#3068
opened Aug 12, 2025 by
ben-sublime
Contributor
Loading…
Update credential_phishing_esign_document_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
shared-samples:excluded:author_membership
#3640
opened Dec 8, 2025 by
alexo-nano
Contributor
Loading…
Update impersonation_amazon.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3699
opened Dec 19, 2025 by
peterdj45
Member
Loading…
Enhance Zoom brand impersonation detection rule
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3513
opened Nov 11, 2025 by
peterdj45
Member
Loading…
Add regex check for ShareFile support URL
in-test-rules
PR is in our testing suite to collect telemetry
#3620
opened Dec 4, 2025 by
peterdj45
Member
Loading…
Create job_scam_developer.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3750
opened Jan 9, 2026 by
peterdj45
Member
Loading…
Add USPTO impersonation detection rule
in-test-rules
PR is in our testing suite to collect telemetry
#3506
opened Nov 10, 2025 by
peterdj45
Member
Loading…
Add detection rule for Login.gov and ID.me impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#3580
opened Nov 22, 2025 by
peterdj45
Member
Loading…
Enhance detection rules for SSA impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#3556
opened Nov 20, 2025 by
peterdj45
Member
Loading…
Fix regex pattern in suspicious_request_financial.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3564
opened Nov 20, 2025 by
peterdj45
Member
Loading…
Refine attachment filtering in phishing detection rule
in-test-rules
PR is in our testing suite to collect telemetry
#3562
opened Nov 20, 2025 by
peterdj45
Member
Loading…
Add detection rule for command-line download instructions
in-test-rules
PR is in our testing suite to collect telemetry
#3667
opened Dec 12, 2025 by
morriscode
Member
Loading…
Add detection rule for HostPapa infrastructure abuse
in-test-rules
PR is in our testing suite to collect telemetry
#3610
opened Dec 1, 2025 by
peterdj45
Member
Loading…
Add detection rule for Carta brand impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#3490
opened Nov 6, 2025 by
peterdj45
Member
Loading…
ASR - Add detection rule for confusable character domains
in-test-rules
PR is in our testing suite to collect telemetry
#3500
opened Nov 8, 2025 by
morriscode
Member
Loading…
Add detection rule for BEC fake thread impersonation
in-test-rules
PR is in our testing suite to collect telemetry
#3775
opened Jan 14, 2026 by
peterdj45
Member
Loading…
Enhance spam detection rule for dating profiles
in-test-rules
PR is in our testing suite to collect telemetry
#3776
opened Jan 14, 2026 by
peterdj45
Member
Loading…
Enhance brand impersonation detection for IRS
in-test-rules
PR is in our testing suite to collect telemetry
#3811
opened Jan 21, 2026 by
peterdj45
Member
Loading…
Alexa -> Tranco
in-test-rules
PR is in our testing suite to collect telemetry
#3829
opened Jan 23, 2026 by
aidenmitchell
Member
Loading…
Add detection rule for suspicious AWS S3 links
in-test-rules
PR is in our testing suite to collect telemetry
#3870
opened Jan 27, 2026 by
peterdj45
Member
Loading…
Add detection rule for BAT file attachments
in-test-rules
PR is in our testing suite to collect telemetry
#3893
opened Jan 28, 2026 by
peterdj45
Member
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-08-03.