Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
119 Open 4,531 Closed
119 Open 4,531 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update observed IOC rules - 2026-06-11 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4651 opened Jun 11, 2026 by github-actions Bot Loading…
1
Create link_view_following_doc.yml in-test-rules PR is in our testing suite to collect telemetry
#4647 opened Jun 10, 2026 by zoomequipd Member Loading…
Create fake discount promotion rule in-test-rules PR is in our testing suite to collect telemetry
#4645 opened Jun 9, 2026 by cybher0808 Member Loading…
@cybher0808
Update impersonation_fake_copyright_infringement_notice_from_unsolicited_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4644 opened Jun 9, 2026 by D-Bolton Member Loading…
Create evasion_hidden_content_gmail.yml in-test-rules PR is in our testing suite to collect telemetry
#4642 opened Jun 9, 2026 by D-Bolton Member Loading…
Refine rule for Social Security Impersonation in-test-rules PR is in our testing suite to collect telemetry
#4640 opened Jun 9, 2026 by cybher0808 Member Loading…
@cybher0808
2
Create link_concatenated_display_text_pdf_reference.yml in-test-rules PR is in our testing suite to collect telemetry
#4635 opened Jun 8, 2026 by D-Bolton Member Loading…
Refine name and description for UPS impersonation rule in-test-rules PR is in our testing suite to collect telemetry
#4633 opened Jun 8, 2026 by cybher0808 Member Loading…
@cybher0808
4
Fuzzy attack score test rules in-test-rules PR is in our testing suite to collect telemetry
#4613 opened Jun 4, 2026 by dlynch-sublime Member Loading…
Update body_business_email_compromise_new_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4609 opened Jun 3, 2026 by keaton-sublime Member • Draft
Update body_advance_fee_new_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4600 opened Jun 3, 2026 by JFarina5 Member Loading…
@IndiaAce
3
Create attachment_pdf_suspicious_financial_lure.yml in-test-rules PR is in our testing suite to collect telemetry
#4598 opened Jun 3, 2026 by keaton-sublime Member • Draft
Revise DHL impersonation detection regex in-test-rules PR is in our testing suite to collect telemetry
#4597 opened Jun 3, 2026 by cybher0808 Member Loading…
@cybher0808
1
Expand confusable character coverage in homoglyph detection rules review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4596 opened Jun 2, 2026 by yana-ivanov Loading…
@IndiaAce
10
Create detection rule for BEC tax document requests in-test-rules PR is in our testing suite to collect telemetry
#4586 opened Jun 2, 2026 by cybher0808 Member Loading…
@IndiaAce @cybher0808
8
Add detection rule for suspicious PDF links in RFQ/RFP in-test-rules PR is in our testing suite to collect telemetry
#4563 opened May 28, 2026 by peterdj45 Member Loading…
@IndiaAce
3
Update whitespace stuffing regex and generic document sharing thread exclusion hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules test-rules:excluded:manual Manually excluded from test-rules, either by adding this label or removing the in-test-rules label
#4556 opened May 28, 2026 by IndiaAce Member Loading…
1
Modify Callback phishing rule in-test-rules PR is in our testing suite to collect telemetry
#4554 opened May 27, 2026 by cybher0808 Member Loading…
@cybher0808
Create link_base64_recipient_with_arrow.yml in-test-rules PR is in our testing suite to collect telemetry
#4551 opened May 27, 2026 by D-Bolton Member Loading…
Add condition for 'Fax Message Delivered' in detection rule in-test-rules PR is in our testing suite to collect telemetry
#4544 opened May 26, 2026 by peterdj45 Member Loading…
Create attachment_pdf_base64_javascript_yara.yml
#4542 opened May 26, 2026 by keaton-sublime Member • Draft
Modify self-sender rule to detect suspicious links in-test-rules PR is in our testing suite to collect telemetry
#4529 opened May 22, 2026 by peterdj45 Member Loading…
Update impersonation_fake_copyright_infringement_notice_from_unsolicited_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4526 opened May 21, 2026 by missingn0pe Member Loading…
@IndiaAce @missingn0pe
Update credential_phishing_suspicious_subject_nlu_financial_urgent.yml in-test-rules PR is in our testing suite to collect telemetry
#4519 opened May 20, 2026 by cybher0808 Member Loading…
@cybher0808
Add first_name/last_name concat matching to org_vips body/subject rules in-test-rules PR is in our testing suite to collect telemetry
#4515 opened May 20, 2026 by IndiaAce Member Loading…
ProTip! Adding no:label will show everything without a label.