-
Notifications
You must be signed in to change notification settings - Fork 99
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update observed IOC rules - 2026-08-29
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5214
opened Aug 29, 2026 by
github-actions
Bot
Loading…
Update html_bidi_rtl_override.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5213
opened Aug 28, 2026 by
JFarina5
Member
Loading…
Update brand_impersonation_tiktok.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5212
opened Aug 28, 2026 by
JFarina5
Member
Loading…
Fix rule validation diagnostics: deprecated identifiers, regex hints, logic ambiguities
shared-samples:excluded:bulk_rules
#5211
opened Aug 28, 2026 by
aidenmitchell
Member
•
Draft
4 of 5 tasks
Create link_fake_video_new_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5210
opened Aug 28, 2026 by
keaton-sublime
Member
•
Draft
CI: annotate PRs with rule validation diagnostics, scope to changed files
#5209
opened Aug 28, 2026 by
aidenmitchell
Member
Loading…
4 of 5 tasks
Create attachment_fake_research_internship.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5206
opened Aug 28, 2026 by
IndiaAce
Member
Loading…
Remove noisy and redundant DLP rules
review-needed
Indicates that a PR is waiting for review
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5204
opened Aug 27, 2026 by
rw-access
Contributor
Loading…
Update credential_phishing_esign_document_notification.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5203
opened Aug 27, 2026 by
IndiaAce
Member
Loading…
Create link_email_tracking_recon.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5202
opened Aug 27, 2026 by
keaton-sublime
Member
•
Draft
Update impersonation_dropbox.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5200
opened Aug 27, 2026 by
JFarina5
Member
Loading…
Update link_credential_cloud_service.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5198
opened Aug 27, 2026 by
JFarina5
Member
Loading…
Create link_hidden_html_content_personalized_links.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#5190
opened Aug 26, 2026 by
IndiaAce
Member
Loading…
Create brand_impersonation_bill.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5182
opened Aug 25, 2026 by
markmsublime
Member
Loading…
Create nsfw_google_drive_share.yml
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5173
opened Aug 25, 2026 by
cybher0808
Contributor
Loading…
Create link_short_message_with_generic_subdomain_matching_sender_domain.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5171
opened Aug 24, 2026 by
missingn0pe
Member
Loading…
Create bec_receipt_transaction.yml
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5158
opened Aug 24, 2026 by
cybher0808
Contributor
Loading…
Create brand_impersonation_verizon.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5153
opened Aug 21, 2026 by
markmsublime
Member
Loading…
Create attachment_zip_filename_mismatch.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5151
opened Aug 21, 2026 by
keaton-sublime
Member
•
Draft
Add test rules for FAS spam/malicious verdicts
in-test-rules
PR is in our testing suite to collect telemetry
#5138
opened Aug 20, 2026 by
dlynch-sublime
Member
Loading…
Create unsolicited_b2b_joboutreach.yml
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5136
opened Aug 19, 2026 by
cybher0808
Contributor
Loading…
Update impersonation_sam_sba_federal_registration.yml
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5128
opened Aug 18, 2026 by
cybher0808
Contributor
Loading…
Create brand_impersonation_apple.yml
shared-samples:excluded:author_membership
test-rules:excluded:author_membership
#5125
opened Aug 17, 2026 by
cybher0808
Contributor
Loading…
Add pkpass Apple Wallet phishing detection rule
hunting-required
Hunts needed to validate rule efficacy
review-needed
Indicates that a PR is waiting for review
shared-samples:excluded:author_membership
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#5120
opened Aug 16, 2026 by
yana-ivanov
Contributor
Loading…
Update cred_theft_suspicious_invoice_w_missing_or_image_only_attachments.yml
in-test-rules
PR is in our testing suite to collect telemetry
#5101
opened Aug 12, 2026 by
JFarina5
Member
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.