-
Notifications
You must be signed in to change notification settings - Fork 87
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Create link_google_form_cred_theft_new_sender.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4092
opened Feb 28, 2026 by
zoomequipd
Loading…
Update attachment_pdf_link_sus_lang.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4091
opened Feb 27, 2026 by
zoomequipd
Loading…
Update impersonation_vip_urgent_request.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4090
opened Feb 26, 2026 by
JFarina5
Loading…
Create attachment_pdf_sus_specific_strings_single_url.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4089
opened Feb 26, 2026 by
zoomequipd
Loading…
Update impersonation_vip_bec_loose.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4088
opened Feb 26, 2026 by
JFarina5
Loading…
Create link_suspicious_email_contains_link_to_page_protected_by_captc…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4087
opened Feb 25, 2026 by
hadojae
Loading…
Create link_suspicious_email_link_resolves_page_containing_javascript…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4086
opened Feb 25, 2026 by
hadojae
Loading…
Create bec_fraud_self_reply_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4083
opened Feb 24, 2026 by
JFarina5
Loading…
Create attachment_pdf_proposal_cred_theft.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4079
opened Feb 24, 2026 by
zoomequipd
Loading…
Create attachment_pdf_email_table.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4077
opened Feb 24, 2026 by
zoomequipd
Loading…
Create attachment_pdf_bid_proposal_lure_with_credential_theft_indicat…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4076
opened Feb 24, 2026 by
hadojae
Loading…
Create fake_warning_banner_confusables.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4073
opened Feb 23, 2026 by
zoomequipd
Loading…
Create attachment_pdf_obj_hash_hr_compensation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4069
opened Feb 20, 2026 by
JFarina5
Loading…
Create link_commonly_abused_web_service_redirecting_to_zip_file.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4068
opened Feb 20, 2026 by
hadojae
Loading…
Update suspicious_request_for_quote_or_purchase.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4067
opened Feb 20, 2026 by
markmsublime
Loading…
Create attachment_pdf_cred_theft_suspicious_replyto_custom_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4065
opened Feb 19, 2026 by
D-Bolton
Loading…
Create attachment_pdf_pw_protected_recipient_targeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4064
opened Feb 19, 2026 by
D-Bolton
Loading…
Create attachment_pdf_object_hash_encrypted.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4063
opened Feb 19, 2026 by
keaton-sublime
Loading…
Create link_hidden_domain_using_at_symbol_with_suspicious_indicators.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4062
opened Feb 19, 2026 by
hadojae
Loading…
Create attachment_pdf_obj_hash_generic_invoice.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4060
opened Feb 19, 2026 by
JFarina5
Loading…
Update abuse_docsend_unsolicited_reply-to.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4059
opened Feb 19, 2026 by
markmsublime
Loading…
Create link_apple_store_redirect.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4058
opened Feb 19, 2026 by
cybher0808
Loading…
Add detection rule for AI-generated credential theft
in-test-rules
PR is in our testing suite to collect telemetry
#4056
opened Feb 19, 2026 by
IndiaAce
Loading…
Update attachment_pdf_recip_email_in_link.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4055
opened Feb 19, 2026 by
D-Bolton
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-02-25.