Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
96 Open 3,630 Closed
96 Open 3,630 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update recon_short_generic_greeting.yml in-test-rules PR is in our testing suite to collect telemetry
#3727 opened Dec 31, 2025 by IndiaAce Loading…
Enhance detection rules for SharePoint credential theft in-test-rules PR is in our testing suite to collect telemetry
#3724 opened Dec 31, 2025 by peterdj45 Loading…
Add detection rule for Google Forms abuse hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3723 opened Dec 31, 2025 by peterdj45 Loading…
Refine regex patterns for phishing detection in-test-rules PR is in our testing suite to collect telemetry
#3722 opened Dec 30, 2025 by missingn0pe Loading…
Update impersonation_employee_subject.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3721 opened Dec 30, 2025 by D-Bolton Loading…
Create headers_utf8_base64_encoded_from.yml in-test-rules PR is in our testing suite to collect telemetry
#3720 opened Dec 30, 2025 by MSAdministrator Loading…
@MSAdministrator
Create headers_arc_seal_validation_failure.yml in-test-rules PR is in our testing suite to collect telemetry
#3719 opened Dec 30, 2025 by MSAdministrator Loading…
@MSAdministrator
Add detection rule for AuthentiSign impersonation in-test-rules PR is in our testing suite to collect telemetry
#3718 opened Dec 29, 2025 by missingn0pe Loading…
1
Create fake_ooo_urgent_financial_request.yml in-test-rules PR is in our testing suite to collect telemetry
#3717 opened Dec 29, 2025 by IndiaAce Loading…
Create attachment_pdf_invoice_generator.yml in-test-rules PR is in our testing suite to collect telemetry
#3716 opened Dec 29, 2025 by JFarina5 Loading…
Create link_url_with_recipient_targeting_and_special_characters.yml in-test-rules PR is in our testing suite to collect telemetry
#3715 opened Dec 24, 2025 by IndiaAce Loading…
Update impersonation_sender_o365_mail.yml in-test-rules PR is in our testing suite to collect telemetry
#3714 opened Dec 24, 2025 by zoomequipd Loading…
Update recon_short_body_email_.yml
#3713 opened Dec 23, 2025 by cybher0808 • Draft
@cybher0808
Adding phriendlyphishing simulation
#3712 opened Dec 23, 2025 by MSAdministrator Loading…
@MSAdministrator
1
Update impersonation_netflix.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#3711 opened Dec 23, 2025 by zoomequipd Loading…
Create subject_sus_bracket_ref.yml in-test-rules PR is in our testing suite to collect telemetry
#3710 opened Dec 23, 2025 by zoomequipd Loading…
Update body_bec_mobile_solicitation_reply_thread.yml
#3709 opened Dec 22, 2025 by cybher0808 • Draft
Create attachment_pdf_uuidv7_suspicious_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#3708 opened Dec 22, 2025 by MSAdministrator Loading…
@MSAdministrator
Create link_microsoft_html_generator.yml in-test-rules PR is in our testing suite to collect telemetry
#3707 opened Dec 22, 2025 by MSAdministrator Loading…
@MSAdministrator
Create abuse_adobe_domain_financial.yml in-test-rules PR is in our testing suite to collect telemetry
#3706 opened Dec 22, 2025 by MSAdministrator Loading…
@MSAdministrator
Update service_abuse_sendgrid_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3704 opened Dec 22, 2025 by zoomequipd Loading…
1
Updating "Thread hijacking with typosquat domain" to use new previous_threads sender fields in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3702 opened Dec 19, 2025 by aidenmitchell Loading…
1
Create service_abuse_sendgrid_free_email_provider.yml in-test-rules PR is in our testing suite to collect telemetry
#3700 opened Dec 19, 2025 by zoomequipd Loading…
Update impersonation_amazon.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3699 opened Dec 19, 2025 by peterdj45 Loading…
1
Update impersonation_quickbooks.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3697 opened Dec 17, 2025 by MSAdministrator Loading…
@MSAdministrator
2
ProTip! Exclude everything labeled bug with -label:bug.