-
Notifications
You must be signed in to change notification settings - Fork 81
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Update regex for remittance advice in detection rules
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3632
opened Dec 5, 2025 by
peterdj45
Loading…
Update attachment_pdf_comp_review.yml
review-needed
Indicates that a PR is waiting for review
test-rules:excluded:author_membership
#3631
opened Dec 5, 2025 by
alexo-nano
Loading…
Update impersonation_dropbox.yml
review-needed
Indicates that a PR is waiting for review
test-rules:excluded:author_membership
#3629
opened Dec 5, 2025 by
alexo-nano
Loading…
Update fake_thread_suspicious_indicators.yml
review-needed
Indicates that a PR is waiting for review
test-rules:excluded:author_membership
#3628
opened Dec 5, 2025 by
alexo-nano
Loading…
Update scam_piano.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3627
opened Dec 5, 2025 by
zoomequipd
Loading…
LWescott update body_bec_mobile_solicitation_reply_thread.yml ESC-3932
in-test-rules
PR is in our testing suite to collect telemetry
#3625
opened Dec 4, 2025 by
IndiaAce
Loading…
Create link_multiple_rewrite_encoders_high.yml and link_multiple_rewrite_encoders_medium.yml
#3622
opened Dec 4, 2025 by
MSAdministrator
•
Draft
Create link_rewrite_encoders_medium.yml & link_rewrite_encoders_high.yml
#3621
opened Dec 4, 2025 by
MSAdministrator
•
Draft
Add regex check for ShareFile support URL
in-test-rules
PR is in our testing suite to collect telemetry
#3620
opened Dec 4, 2025 by
peterdj45
Loading…
LWescott update attachment_eml_suspicious_indicators.yml ESC-3987
in-test-rules
PR is in our testing suite to collect telemetry
#3618
opened Dec 3, 2025 by
IndiaAce
Loading…
LWescott update attachment_eml_cred_theft_language auth check for benign messages ESC-3987
in-test-rules
PR is in our testing suite to collect telemetry
#3617
opened Dec 3, 2025 by
IndiaAce
Loading…
Create suspicious_matching_subject_sender_display_name.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3616
opened Dec 2, 2025 by
D-Bolton
Loading…
Update CTA scope for MST Invite
in-test-rules
PR is in our testing suite to collect telemetry
#3615
opened Dec 2, 2025 by
missingn0pe
Loading…
Update spam_website_errors_solicitation.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3614
opened Dec 2, 2025 by
JFarina5
Loading…
LWescott update attachment_adobe_image_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3612
opened Dec 2, 2025 by
IndiaAce
Loading…
Enhance detection rules for credential phishing
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3611
opened Dec 2, 2025 by
peterdj45
Loading…
Add detection rule for HostPapa infrastructure abuse
in-test-rules
PR is in our testing suite to collect telemetry
#3610
opened Dec 1, 2025 by
peterdj45
Loading…
Update attachment_powerpoint_hyperlinks.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3609
opened Dec 1, 2025 by
MSAdministrator
Loading…
Update attachment_adobe_image_lure.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3608
opened Dec 1, 2025 by
MSAdministrator
Loading…
Add detection rule for GoDaddy service abuse
in-test-rules
PR is in our testing suite to collect telemetry
#3602
opened Nov 27, 2025 by
peterdj45
Loading…
Create brand_impersonation_state_farm.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3600
opened Nov 26, 2025 by
JFarina5
Loading…
Update credential phishing detection rules
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3597
opened Nov 25, 2025 by
peterdj45
Loading…
Updating suspicious_request_for_quote_or_purchase.yml
in-test-rules
PR is in our testing suite to collect telemetry
review-needed
Indicates that a PR is waiting for review
#3595
opened Nov 25, 2025 by
MSAdministrator
Loading…
LWescott create link_payment_proof_with_suspicious_indicators.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3594
opened Nov 25, 2025 by
IndiaAce
Loading…
LWescott create hidden_unicode_characters_suspicious_indicators.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3593
opened Nov 25, 2025 by
IndiaAce
Loading…
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.