-
Notifications
You must be signed in to change notification settings - Fork 87
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Create sus_urllink_hTTPs.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4120
opened Mar 5, 2026 by
cybher0808
Loading…
Update sender_display_name_kindly.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4119
opened Mar 4, 2026 by
D-Bolton
Loading…
Create service_abuse_microsoft_flow_noreply.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4118
opened Mar 4, 2026 by
markmsublime
Loading…
Create link_rfi_document_pattern.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4117
opened Mar 4, 2026 by
keaton-sublime
•
Draft
Update impersonation_vip_w2_request.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4116
opened Mar 4, 2026 by
D-Bolton
Loading…
Update brand_impersionation_zoom_lookalike.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4115
opened Mar 4, 2026 by
D-Bolton
Loading…
Create spam_sexually_explicit_with_emoji_from_freemail.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4114
opened Mar 4, 2026 by
D-Bolton
Loading…
Add detection rule for manipulated Outlook messages
in-test-rules
PR is in our testing suite to collect telemetry
#4111
opened Mar 4, 2026 by
IndiaAce
Loading…
Update impersonation_brand_wix.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4110
opened Mar 4, 2026 by
markmsublime
Loading…
Update link_apple_store_ai_advertising.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4109
opened Mar 4, 2026 by
markmsublime
Loading…
Create service_abuse_google_oauth_with_suspicious_redirect_destinatio…
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4107
opened Mar 3, 2026 by
hadojae
Loading…
Create cred_phish_displayurl_port.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4106
opened Mar 3, 2026 by
cybher0808
Loading…
Create link_google_drawings_new_sender.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4105
opened Mar 3, 2026 by
JFarina5
Loading…
Update link_office365_suspicious_app_authorization.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#4104
opened Mar 3, 2026 by
hadojae
Loading…
[senderprofile] Removing Bulk Set 6
in-test-rules
PR is in our testing suite to collect telemetry
#4103
opened Mar 3, 2026 by
MSAdministrator
Loading…
[senderprofle] Remove Bulk Set 5
in-test-rules
PR is in our testing suite to collect telemetry
#4102
opened Mar 3, 2026 by
MSAdministrator
Loading…
Removing sender profile from sendgrid impersonation rule & the name
in-test-rules
PR is in our testing suite to collect telemetry
#4099
opened Mar 2, 2026 by
IndiaAce
Loading…
Create attachment_pdf_object_hash_fake_zoom_meeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4098
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create attachment_pdf_url_zoom_meeting.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4097
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create brand_impersonation_zoom_span_obfuscation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4096
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Create brand_impersonation_zoom_deception.yml
in-test-rules
PR is in our testing suite to collect telemetry
#4095
opened Mar 2, 2026 by
keaton-sublime
•
Draft
Add detection rule for AI-generated credential phishing
in-test-rules
PR is in our testing suite to collect telemetry
#4093
opened Mar 2, 2026 by
IndiaAce
Loading…
Update attachment_pdf_link_sus_lang.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#4091
opened Feb 27, 2026 by
zoomequipd
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.