Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
62 Open 3,439 Closed
62 Open 3,439 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Refactor link detection rules for Punycode characters in-test-rules PR is in our testing suite to collect telemetry
#3502 opened Nov 8, 2025 by morriscode Loading…
ASR - Add detection rule for confusable character domains in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3500 opened Nov 8, 2025 by morriscode Loading…
Update attachment_legal_pdf_link.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3498 opened Nov 7, 2025 by aidenmitchell Loading…
Create link_crypto_fraud.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3497 opened Nov 7, 2025 by aidenmitchell Loading…
LWescott updating brand_impersonation_google_careers to exclude the sublime domain from the sender exclusion in-test-rules PR is in our testing suite to collect telemetry
#3495 opened Nov 7, 2025 by IndiaAce Loading…
Update impersonation_google_drive_file_share.yml in-test-rules PR is in our testing suite to collect telemetry
#3494 opened Nov 7, 2025 by aidenmitchell Loading…
Update link_display_text_matches_subject.yml hunting-required Hunts needed to validate rule efficacy review-needed Indicates that a PR is waiting for review test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3493 opened Nov 7, 2025 by aidenmitchell Loading…
Add new patterns to Google Drive impersonation rule in-test-rules PR is in our testing suite to collect telemetry
#3492 opened Nov 7, 2025 by peterdj45 Loading…
Enhance impersonation detection for Microsoft Teams in-test-rules PR is in our testing suite to collect telemetry
#3491 opened Nov 7, 2025 by peterdj45 Loading…
Add detection rule for Carta brand impersonation in-test-rules PR is in our testing suite to collect telemetry
#3490 opened Nov 6, 2025 by peterdj45 Loading…
Update credential_phishing_corporate_services_impersonation_with_susp… review-needed Indicates that a PR is waiting for review test-rules:excluded:author_membership
#3489 opened Nov 6, 2025 by alexo-nano Loading…
LWescott create body_encrypted_zip_password_attachment.yml in-test-rules PR is in our testing suite to collect telemetry
#3488 opened Nov 6, 2025 by IndiaAce Loading…
Create brand_impersonation_greenvelope.yml in-test-rules PR is in our testing suite to collect telemetry
#3487 opened Nov 6, 2025 by zoomequipd Loading…
Refine impersonation detection rules for Teams in-test-rules PR is in our testing suite to collect telemetry
#3483 opened Nov 6, 2025 by peterdj45 Loading…
Create attachment_html_smuggling_b64_zip.yml in-test-rules PR is in our testing suite to collect telemetry
#3482 opened Nov 6, 2025 by zoomequipd Loading…
Refine regex for detecting fake fax communications in-test-rules PR is in our testing suite to collect telemetry
#3481 opened Nov 6, 2025 by peterdj45 Loading…
Modifying negation condition to cover hijacked threads. Fake VM from untrusted sender. in-test-rules PR is in our testing suite to collect telemetry
#3480 opened Nov 5, 2025 by missingn0pe Loading…
Create impersonation_google_workspace.yml hunting-required Hunts needed to validate rule efficacy in-test-rules PR is in our testing suite to collect telemetry
#3479 opened Nov 5, 2025 by brycampbell Loading…
1
Update rule logic in-test-rules PR is in our testing suite to collect telemetry
#3477 opened Nov 4, 2025 by missingn0pe Loading…
Create attachment_pdf_microsoft_purview_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry
#3476 opened Nov 4, 2025 by D-Bolton Loading…
Updating Fake voicemail notification (untrusted sender) regex in-test-rules PR is in our testing suite to collect telemetry
#3475 opened Nov 4, 2025 by MSAdministrator Loading…
1
Create headers_mailer_contains_hidden_content.yml in-test-rules PR is in our testing suite to collect telemetry
#3474 opened Nov 4, 2025 by D-Bolton Loading…
Create attachment_docx_hyperlink_targeting_recipient.yml in-test-rules PR is in our testing suite to collect telemetry
#3472 opened Nov 4, 2025 by D-Bolton Loading…
convert to subject.base /subject.is_reply/subject.is_forward in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3470 opened Nov 4, 2025 by zoomequipd Loading…
Update impersonation_social_security_admin.yml in-test-rules PR is in our testing suite to collect telemetry
#3465 opened Nov 3, 2025 by markmsublime Loading…
ProTip! Follow long discussions with comments:>50.