Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
138 Open 4,784 Closed
138 Open 4,784 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update: credential_phishing_corporate_services_impersonation_with_suspicious_link - Improve display text regex in-test-rules PR is in our testing suite to collect telemetry
#4928 opened Jul 18, 2026 by missingn0pe Member Loading…
@missingn0pe
Update: recon_short_generic_greeting.yml - Adding compound logic in-test-rules PR is in our testing suite to collect telemetry
#4927 opened Jul 18, 2026 by missingn0pe Member Loading…
@missingn0pe
Create: brand_impersonation_sofi - SoFi financial brand impersonation detection in-test-rules PR is in our testing suite to collect telemetry
#4924 opened Jul 18, 2026 by missingn0pe Member Loading…
@missingn0pe
Update: body_fake_investment_outreach_suspicious_tld.yml with additional signals in-test-rules PR is in our testing suite to collect telemetry
#4923 opened Jul 17, 2026 by missingn0pe Member Loading…
@missingn0pe
Update attachment_ics_sus_prodid.yml in-test-rules PR is in our testing suite to collect telemetry
#4922 opened Jul 17, 2026 by JFarina5 Member Loading…
ClickFix: Clipboard hijack lure with copy-paste-to-terminal instruction review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4921 opened Jul 17, 2026 by yana-ivanov Contributor Loading…
1
Update: attachment_encrypted_pdf_cred_theft.yml - Small regex tweak in-test-rules PR is in our testing suite to collect telemetry
#4920 opened Jul 17, 2026 by missingn0pe Member Loading…
@zoomequipd
Create link_obfuscation_unserscore_dot_substitution.yml in-test-rules PR is in our testing suite to collect telemetry
#4918 opened Jul 17, 2026 by D-Bolton Member Loading…
Create service_abuse_wufoo_cred_theft.yml in-test-rules PR is in our testing suite to collect telemetry
#4917 opened Jul 17, 2026 by D-Bolton Member Loading…
Create link_pdf_lure_with_image_resolutions.yml in-test-rules PR is in our testing suite to collect telemetry
#4916 opened Jul 17, 2026 by keaton-sublime Member • Draft
Update impersonation_dotloop.yml in-test-rules PR is in our testing suite to collect telemetry
#4915 opened Jul 17, 2026 by D-Bolton Member Loading…
Add phishing simulation header insights for common training vendors
#4914 opened Jul 16, 2026 by MSAdministrator Member Loading…
1
Add phishing simulation exclusions for common training vendors
#4913 opened Jul 16, 2026 by MSAdministrator Member Loading…
Create attachment_ics_teams_impersonation.yml in-test-rules PR is in our testing suite to collect telemetry
#4910 opened Jul 16, 2026 by JFarina5 Member Loading…
Create link_fake_forward_suspicious_url.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4909 opened Jul 16, 2026 by JFarina5 Member Loading…
1
Update suspicious_request_for_quote_or_purchase.yml in-test-rules PR is in our testing suite to collect telemetry
#4908 opened Jul 16, 2026 by cybher0808 Member Loading…
@cybher0808
Update link_credential_cloud_service.yml in-test-rules PR is in our testing suite to collect telemetry
#4906 opened Jul 16, 2026 by cybher0808 Member Loading…
@cybher0808
Create link_susp_html_mirrored_subject.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4905 opened Jul 16, 2026 by keaton-sublime Member Loading…
1
Create attachment_office_doc_image_link_self_service.yml in-test-rules PR is in our testing suite to collect telemetry
#4903 opened Jul 15, 2026 by zoomequipd Member Loading…
Add detection rule for suspicious toll-free numbers in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4902 opened Jul 15, 2026 by peterdj45 Member Loading…
1
Create link_mixed_href_structure.yml in-test-rules PR is in our testing suite to collect telemetry
#4899 opened Jul 15, 2026 by keaton-sublime Member Loading…
Create attachment_targeted_docx_ack_lure.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4897 opened Jul 15, 2026 by keaton-sublime Member Loading…
1
Create attachment_ics_malformed_organizer_short_body.yml in-test-rules PR is in our testing suite to collect telemetry
#4895 opened Jul 15, 2026 by markmsublime Member Loading…
Include DLP discovery rules in MQL auto-format CI steps
#4891 opened Jul 15, 2026 by aidenmitchell Member Loading…
1 task
Update impersonation_social_SA.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4890 opened Jul 14, 2026 by JFarina5 Member Loading…
1
ProTip! What’s not been updated in a month: updated:<2026-06-18.