Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
126 Open 4,829 Closed
126 Open 4,829 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Enhance brand impersonation detection for Punchbowl
#4961 opened Jul 27, 2026 by peterdj45 Member Loading…
Create service_abuse_postman_cred_theft.yml in-test-rules PR is in our testing suite to collect telemetry
#4960 opened Jul 27, 2026 by markmsublime Member Loading…
Update impersonation_amazon.yml in-test-rules PR is in our testing suite to collect telemetry
#4959 opened Jul 27, 2026 by cybher0808 Member Loading…
Create link_wordpress_redirect_root.yml hunting-required Hunts needed to validate rule efficacy review-needed Indicates that a PR is waiting for review test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4957 opened Jul 27, 2026 by zoomequipd Member Loading…
1
Update observed IOC rules - 2026-07-26 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4956 opened Jul 26, 2026 by github-actions Bot Loading…
1
Create phishing_personalized_doc_signing_request.yml in-test-rules PR is in our testing suite to collect telemetry
#4955 opened Jul 25, 2026 by IndiaAce Member Loading…
Update credential_theft_js_date_manipulation.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4953 opened Jul 24, 2026 by JFarina5 Member Loading…
1
Update impersonation_quickbooks.yml in-test-rules PR is in our testing suite to collect telemetry
#4952 opened Jul 23, 2026 by JFarina5 Member Loading…
Create body_css_clamp_ip_link.yml in-test-rules PR is in our testing suite to collect telemetry
#4951 opened Jul 23, 2026 by JFarina5 Member Loading…
Update link_credential_cloud_service.yml in-test-rules PR is in our testing suite to collect telemetry
#4950 opened Jul 23, 2026 by JFarina5 Member Loading…
Update brand_impersonation_ms_planner.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4949 opened Jul 23, 2026 by zoomequipd Member Loading…
@IndiaAce
1
Update: attachment_encrypted_pdf_cred_theft in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4944 opened Jul 22, 2026 by peterdj45 Member Loading…
@zoomequipd
4
Create bec_family_office_investment_solicitation.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4943 opened Jul 21, 2026 by JFarina5 Member Loading…
2
Enhance detection rules for thread hijacking and cred theft in-test-rules PR is in our testing suite to collect telemetry
#4940 opened Jul 21, 2026 by peterdj45 Member Loading…
Update: recon_short_generic_greeting.yml - Adding compound logic in-test-rules PR is in our testing suite to collect telemetry
#4927 opened Jul 18, 2026 by missingn0pe Member Loading…
Create: brand_impersonation_sofi - SoFi financial brand impersonation detection in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4924 opened Jul 18, 2026 by missingn0pe Member Loading…
@zoomequipd
Update: body_fake_investment_outreach_suspicious_tld.yml with additional signals in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4923 opened Jul 17, 2026 by missingn0pe Member Loading…
@zoomequipd
6
ClickFix: Clipboard hijack lure with copy-paste-to-terminal instruction review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4921 opened Jul 17, 2026 by yana-ivanov Contributor Loading…
@zoomequipd
13
Create link_obfuscation_underscore_dot_substitution.yml in-test-rules PR is in our testing suite to collect telemetry
#4918 opened Jul 17, 2026 by D-Bolton Member Loading…
Create service_abuse_wufoo_cred_theft.yml in-test-rules PR is in our testing suite to collect telemetry
#4917 opened Jul 17, 2026 by D-Bolton Member Loading…
Create link_pdf_lure_with_image_resolutions.yml in-test-rules PR is in our testing suite to collect telemetry
#4916 opened Jul 17, 2026 by keaton-sublime Member • Draft
Add phishing simulation header insights for common training vendors
#4914 opened Jul 16, 2026 by MSAdministrator Member Loading…
1
Add phishing simulation exclusions for common training vendors
#4913 opened Jul 16, 2026 by MSAdministrator Member Loading…
Create attachment_ics_teams_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry
#4910 opened Jul 16, 2026 by JFarina5 Member Loading…
Update suspicious_request_for_quote_or_purchase.yml in-test-rules PR is in our testing suite to collect telemetry
#4908 opened Jul 16, 2026 by cybher0808 Member Loading…
@cybher0808
ProTip! Follow long discussions with comments:>50.