Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
157 Open 4,191 Closed
157 Open 4,191 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update generic_pdf.yar review-needed Indicates that a PR is waiting for review
#4349 opened Apr 14, 2026 by keaton-sublime Member Loading…
1
Update link_credential_phishing_secure_message.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4346 opened Apr 14, 2026 by markmsublime Member Loading…
1
updates to the default email bomb automation review-needed Indicates that a PR is waiting for review
#4345 opened Apr 14, 2026 by zoomequipd Member Loading…
1
Add "ICS Phishing" attack type to calendar/ICS rules shared-samples:excluded:bulk_rules test-rules:excluded:bulk_rules Bulk rule update, excluded from test rules
#4344 opened Apr 14, 2026 by aidenmitchell Member Loading…
1
Update bec_urgent_suspicious_patterns.yml in-test-rules PR is in our testing suite to collect telemetry
#4342 opened Apr 13, 2026 by JFarina5 Member Loading…
Create attachment_pdf_split_qr_code_yara in-test-rules PR is in our testing suite to collect telemetry
#4340 opened Apr 10, 2026 by zoomequipd Member Loading…
Create attachment_pdf_sai_global_logo.yml in-test-rules PR is in our testing suite to collect telemetry
#4339 opened Apr 10, 2026 by zoomequipd Member Loading…
fix: Use PAT for ioc_management access
#4337 opened Apr 10, 2026 by IndiaAce Member Loading…
Update DocuSign Impersonation Rule Link Keywords in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4336 opened Apr 10, 2026 by missingn0pe Member Loading…
Create abuse_meetup_with_brand_impersonation in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4332 opened Apr 9, 2026 by IndiaAce Member Loading…
1
Update brand_impersonation_robinhood.yml in-test-rules PR is in our testing suite to collect telemetry
#4319 opened Apr 6, 2026 by cybher0808 Member Loading…
@cybher0808
Create body_spouse_fake_call.yml in-test-rules PR is in our testing suite to collect telemetry
#4317 opened Apr 6, 2026 by keaton-sublime Member • Draft
1
Create credential_theft_new_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#4311 opened Apr 3, 2026 by cybher0808 Member Loading…
@cybher0808
Create body_html_hidden_conversation.yml in-test-rules PR is in our testing suite to collect telemetry
#4308 opened Apr 3, 2026 by D-Bolton Member Loading…
Create body_ai_gen_credential_theft_suspect_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4304 opened Apr 3, 2026 by IndiaAce Member Loading…
QR Code Analysis Testing 2/2 in-test-rules PR is in our testing suite to collect telemetry
#4303 opened Apr 3, 2026 by zoomequipd Member • Draft
1
Update qr_code_suspicious_indicators.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4301 opened Apr 2, 2026 by hadojae Member Loading…
1
Create callback_scam_file_extensions.yml in-test-rules PR is in our testing suite to collect telemetry
#4300 opened Apr 2, 2026 by cybher0808 Member Loading…
@cybher0808
1
QR Code Analysis Testing 1/2 in-test-rules PR is in our testing suite to collect telemetry
#4298 opened Apr 2, 2026 by zoomequipd Member • Draft
2
Create link_base64_encoded_email_in_url_parameters_self_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4291 opened Apr 1, 2026 by D-Bolton Member Loading…
Update fake_thread_suspicious_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4289 opened Apr 1, 2026 by IndiaAce Member Loading…
Create self_sender_display_name_email_in_subject.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4285 opened Mar 31, 2026 by D-Bolton Member Loading…
8
Refactor exclusion logic for low reputation links in-test-rules PR is in our testing suite to collect telemetry
#4281 opened Mar 31, 2026 by peterdj45 Member Loading…
Refine detection rules for SharePoint fake file shares in-test-rules PR is in our testing suite to collect telemetry
#4280 opened Mar 31, 2026 by peterdj45 Member Loading…
Create impersonate_hubspot_suspicious_content.yml in-test-rules PR is in our testing suite to collect telemetry
#4277 opened Mar 30, 2026 by IndiaAce Member Loading…
ProTip! Follow long discussions with comments:>50.