Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
83 Open 5,277 Closed
83 Open 5,277 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update observed IOC rules - 2026-09-15 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5361 opened Sep 15, 2026 by github-actions Bot Loading…
1
Update attachment_suspicious_message_unscannable_cloudflare.yml review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5360 opened Sep 14, 2026 by m-oliv-2025 Contributor Loading…
@zoomequipd
1
Update link_suspicious_message_unscannable_cloudflare.yml review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5359 opened Sep 14, 2026 by m-oliv-2025 Contributor Loading…
@zoomequipd
1
Create attachment_ics_legal_language.yml in-test-rules PR is in our testing suite to collect telemetry
#5358 opened Sep 14, 2026 by missingn0pe Member Loading…
Update attachment_ics_base64_query_parameter.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5357 opened Sep 14, 2026 by D-Bolton Member Loading…
1
Create attachment_ics_real_estate_fraud.yml in-test-rules PR is in our testing suite to collect telemetry
#5356 opened Sep 14, 2026 by missingn0pe Member Loading…
Update impersonation_mychart.yml in-test-rules PR is in our testing suite to collect telemetry
#5355 opened Sep 14, 2026 by JFarina5 Member Loading…
Update impersonation_uhc.yml in-test-rules PR is in our testing suite to collect telemetry
#5354 opened Sep 14, 2026 by JFarina5 Member Loading…
Update brand_impersonation_survey.yml in-test-rules PR is in our testing suite to collect telemetry
#5353 opened Sep 14, 2026 by JFarina5 Member Loading…
Create bec_contract_agreement_reply_to_mismatch.yml in-test-rules PR is in our testing suite to collect telemetry
#5352 opened Sep 14, 2026 by JFarina5 Member Loading…
Update attachment_ics_voicemail_lure.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5351 opened Sep 14, 2026 by D-Bolton Member Loading…
1
Create attachment_ics_rcpt_hex_encoded_fragment.yml in-test-rules PR is in our testing suite to collect telemetry
#5350 opened Sep 14, 2026 by zoomequipd Member Loading…
Create attachment_rcpt_hex_encoded_fragment.yml in-test-rules PR is in our testing suite to collect telemetry
#5349 opened Sep 14, 2026 by zoomequipd Member Loading…
Update attachment_ics_bid_sus_link.yml in-test-rules PR is in our testing suite to collect telemetry
#5348 opened Sep 14, 2026 by D-Bolton Member Loading…
Create link_rcpt_hex_encoded_fragment.yml in-test-rules PR is in our testing suite to collect telemetry
#5347 opened Sep 14, 2026 by zoomequipd Member Loading…
Create link_job_payment_signature_request.yml in-test-rules PR is in our testing suite to collect telemetry
#5346 opened Sep 14, 2026 by keaton-sublime Member • Draft
Create attachment_ics_sus_link_to_min_js.yml hunting-required Hunts needed to validate rule efficacy review-needed Indicates that a PR is waiting for review test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5345 opened Sep 14, 2026 by D-Bolton Member Loading…
2
Update job_scam_specific_salary.yml in-test-rules PR is in our testing suite to collect telemetry
#5344 opened Sep 14, 2026 by JFarina5 Member Loading…
CI: preserve MQL diagnostic coordinates
#5343 opened Sep 14, 2026 by rw-access Member Loading…
Create body_bid_solicitation_pdf_lure.yml
#5339 opened Sep 14, 2026 by keaton-sublime Member • Draft
Create attachment_pdf_doc_portal_cred_theft_lure.yml in-test-rules PR is in our testing suite to collect telemetry
#5338 opened Sep 13, 2026 by IndiaAce Member Loading…
1
Rename Fuzzy Attack Score on Graymail
#5332 opened Sep 11, 2026 by dlynch-sublime Member • Draft
Update impersonation_social_SA.yml in-test-rules PR is in our testing suite to collect telemetry
#5331 opened Sep 11, 2026 by JFarina5 Member Loading…
Add beta DLP rule for MSIP sensitivity label outbound detection review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5330 opened Sep 11, 2026 by Jummyberry Contributor Loading…
1
Update and rename attachment_pdf_obj_hash_cred_phish.yml to pdf_objec… in-test-rules PR is in our testing suite to collect telemetry
#5329 opened Sep 11, 2026 by keaton-sublime Member Loading…
ProTip! Add no:assignee to see everything that’s not assigned.