Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
85 Open 5,304 Closed
85 Open 5,304 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update observed IOC rules - 2026-09-17 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5390 opened Sep 17, 2026 by github-actions Bot Loading…
1
Update link_credential_phishing_secure_message.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5389 opened Sep 16, 2026 by missingn0pe Member Loading…
1
Update link_fake_storage_alert.yml in-test-rules PR is in our testing suite to collect telemetry
#5388 opened Sep 16, 2026 by JFarina5 Member Loading…
Update link_large_guest_list_sus_link.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5387 opened Sep 16, 2026 by D-Bolton Member Loading…
1
Create attachment_meetergo_booking_link.yml in-test-rules PR is in our testing suite to collect telemetry
#5386 opened Sep 16, 2026 by missingn0pe Member Loading…
1
Create credential_phishing_security_alert_new_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#5385 opened Sep 16, 2026 by JFarina5 Member Loading…
Update attachment_ics_voicemail_lure.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5384 opened Sep 16, 2026 by D-Bolton Member Loading…
1
Update body_fake_investment_outreach_suspicious_tld.yml in-test-rules PR is in our testing suite to collect telemetry
#5381 opened Sep 16, 2026 by JFarina5 Member Loading…
Update attachment_office_sharing_sus_ocr.yml in-test-rules PR is in our testing suite to collect telemetry
#5380 opened Sep 16, 2026 by missingn0pe Member Loading…
Update credential_phishing_email_delivery_failure_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry
#5379 opened Sep 16, 2026 by JFarina5 Member Loading…
Create impersonate_zoho_document_request.yml in-test-rules PR is in our testing suite to collect telemetry
#5377 opened Sep 16, 2026 by IndiaAce Member Loading…
Create attachment_fake_email_body_inline_image.yml in-test-rules PR is in our testing suite to collect telemetry
#5376 opened Sep 16, 2026 by IndiaAce Member Loading…
Create impersonate_microsoft_document_share_pdf.yml in-test-rules PR is in our testing suite to collect telemetry
#5375 opened Sep 16, 2026 by IndiaAce Member Loading…
Add beta DLP rule stubs for EU driver's licenses (DE, PL, NL, GR, FI) review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership
#5374 opened Sep 16, 2026 by Jummyberry Contributor • Draft
1
Create link_disguised_as_pdf.yml in-test-rules PR is in our testing suite to collect telemetry
#5373 opened Sep 16, 2026 by keaton-sublime Member • Draft
Enhance description for Australia ABN detection rule
#5369 opened Sep 15, 2026 by randypargman Member Loading…
@Jummyberry
Add beta DLP rules for Spain and Sweden driver's licenses review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5368 opened Sep 15, 2026 by Jummyberry Contributor Loading…
1
DLP: Rescope AWS rule to secret keys
#5367 opened Sep 15, 2026 by rw-access Member Loading…
Create attachment_pdf_base64_query_parameter.yml in-test-rules PR is in our testing suite to collect telemetry
#5365 opened Sep 15, 2026 by D-Bolton Member Loading…
Update brand_impersonation_state_farm.yml in-test-rules PR is in our testing suite to collect telemetry
#5363 opened Sep 15, 2026 by JFarina5 Member Loading…
add strings.decode_hex to multiple rules hunting-required Hunts needed to validate rule efficacy review-needed Indicates that a PR is waiting for review test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules test-rules:excluded:manual Manually excluded from test-rules, either by adding this label or removing the in-test-rules label
#5362 opened Sep 15, 2026 by zoomequipd Member Loading…
@IndiaAce
2
Create attachment_ics_legal_language.yml in-test-rules PR is in our testing suite to collect telemetry
#5358 opened Sep 14, 2026 by missingn0pe Member Loading…
Update attachment_ics_base64_query_parameter.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5357 opened Sep 14, 2026 by D-Bolton Member Loading…
1
Create attachment_ics_real_estate_fraud.yml in-test-rules PR is in our testing suite to collect telemetry
#5356 opened Sep 14, 2026 by missingn0pe Member Loading…
Update impersonation_mychart.yml in-test-rules PR is in our testing suite to collect telemetry
#5355 opened Sep 14, 2026 by JFarina5 Member Loading…
ProTip! Filter pull requests by the default branch with base:main.