Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
105 Open 5,045 Closed
105 Open 5,045 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update attachment_ics_bid_sus_link.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5154 opened Aug 22, 2026 by markmsublime Member Loading…
@IndiaAce
3
Create brand_impersonation_verizon.yml in-test-rules PR is in our testing suite to collect telemetry
#5153 opened Aug 21, 2026 by markmsublime Member Loading…
Create attachment_zip_filename_mismatch.yml in-test-rules PR is in our testing suite to collect telemetry
#5151 opened Aug 21, 2026 by keaton-sublime Member • Draft
Create html_title_tag_id_subject_line.yml in-test-rules PR is in our testing suite to collect telemetry
#5150 opened Aug 21, 2026 by IndiaAce Member Loading…
@markmsublime
1
Create link_double_encoded_url_path.yml in-test-rules PR is in our testing suite to collect telemetry
#5149 opened Aug 21, 2026 by IndiaAce Member Loading…
@markmsublime
2
Create brand_impersonation_sedgwick.yml in-test-rules PR is in our testing suite to collect telemetry
#5143 opened Aug 21, 2026 by markmsublime Member Loading…
Update observed IOC rules - 2026-08-22 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5142 opened Aug 21, 2026 by github-actions Bot Loading…
2
Create service_abuse_kagoya.yml in-test-rules PR is in our testing suite to collect telemetry
#5141 opened Aug 20, 2026 by markmsublime Member Loading…
Update attachment_pdf_skia_headless.yml in-test-rules PR is in our testing suite to collect telemetry
#5140 opened Aug 20, 2026 by markmsublime Member Loading…
Add test rules for FAS spam/malicious verdicts in-test-rules PR is in our testing suite to collect telemetry
#5138 opened Aug 20, 2026 by dlynch-sublime Member Loading…
2
Create unsolicited_b2b_joboutreach.yml in-test-rules PR is in our testing suite to collect telemetry
#5136 opened Aug 19, 2026 by cybher0808 Member Loading…
Create attachment_zip_office_bin_dll.yml in-test-rules PR is in our testing suite to collect telemetry
#5135 opened Aug 19, 2026 by keaton-sublime Member • Draft
Update impersonation_sam_sba_federal_registration.yml in-test-rules PR is in our testing suite to collect telemetry
#5128 opened Aug 18, 2026 by cybher0808 Member Loading…
Create brand_impersonation_apple.yml in-test-rules PR is in our testing suite to collect telemetry
#5125 opened Aug 17, 2026 by cybher0808 Member Loading…
Add pkpass Apple Wallet phishing detection rule review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5120 opened Aug 16, 2026 by yana-ivanov Contributor Loading…
3
Update cred_theft_suspicious_invoice_w_missing_or_image_only_attachments.yml in-test-rules PR is in our testing suite to collect telemetry
#5101 opened Aug 12, 2026 by JFarina5 Member Loading…
Update link_file_sharing_cred_theft.yml in-test-rules PR is in our testing suite to collect telemetry
#5096 opened Aug 12, 2026 by JFarina5 Member Loading…
Create attachment_pdf_newly_registered_suspicious_link.yml in-test-rules PR is in our testing suite to collect telemetry
#5094 opened Aug 11, 2026 by D-Bolton Member Loading…
Create service_abuse_domain_the_net_new_sender_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#5083 opened Aug 11, 2026 by missingn0pe Member Loading…
Create spam_godaddy_domaincontrol_newly_registered_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#5082 opened Aug 11, 2026 by missingn0pe Member Loading…
Update link_credential_phishing_intent_and_other_indicators.yml hunting-required Hunts needed to validate rule efficacy review-needed Indicates that a PR is waiting for review test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5077 opened Aug 10, 2026 by JFarina5 Member Loading…
@zoomequipd
3
Update: link_credential_phishing_secure_message hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5074 opened Aug 10, 2026 by peterdj45 Member Loading…
1
Create impersonation_law_enforcement_agency_advance_fee.yml in-test-rules PR is in our testing suite to collect telemetry
#5062 opened Aug 7, 2026 by MSAdministrator Member Loading…
Fix undisclosed-recipients handling in body_advance_fee_new_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#5061 opened Aug 7, 2026 by MSAdministrator Member Loading…
Create brand_impersonation_opensea.yml in-test-rules PR is in our testing suite to collect telemetry
#5056 opened Aug 7, 2026 by D-Bolton Member Loading…
ProTip! Exclude everything labeled bug with -label:bug.