-
Notifications
You must be signed in to change notification settings - Fork 86
Pull requests: sublime-security/sublime-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
New rule: (Service abuse) Behance gallery with sus redirect
in-test-rules
PR is in our testing suite to collect telemetry
#3834
opened Jan 23, 2026 by
IndiaAce
Loading…
Update impersonation_usps.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3832
opened Jan 23, 2026 by
hadojae
Loading…
Create attachment_employment_contract_update.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3831
opened Jan 23, 2026 by
MSAdministrator
Loading…
Alexa -> Tranco
in-test-rules
PR is in our testing suite to collect telemetry
#3829
opened Jan 23, 2026 by
aidenmitchell
Loading…
Update impersonation_aramco.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3828
opened Jan 23, 2026 by
markmsublime
Loading…
Create link_recipient_email_in_eta_param.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3826
opened Jan 23, 2026 by
MSAdministrator
Loading…
Enhance detection rule for SharePoint link sharing
in-test-rules
PR is in our testing suite to collect telemetry
#3825
opened Jan 22, 2026 by
peterdj45
Loading…
Create service_abuse_monday_callback.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3824
opened Jan 22, 2026 by
markmsublime
Loading…
Create attachment_ics_calendar_microsoft.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3822
opened Jan 22, 2026 by
MSAdministrator
Loading…
Create link_credential_phishing_copy_paste_instructions.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3821
opened Jan 22, 2026 by
D-Bolton
Loading…
Create brand_impersonation_marriott.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3820
opened Jan 22, 2026 by
markmsublime
Loading…
New rule (Brand impersonation) Fake file sharing with procurement theme
in-test-rules
PR is in our testing suite to collect telemetry
#3818
opened Jan 22, 2026 by
IndiaAce
Loading…
Update link_dynamics_form.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3816
opened Jan 21, 2026 by
MSAdministrator
Loading…
Update attachment_fake_vm_pdf.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3815
opened Jan 21, 2026 by
MSAdministrator
Loading…
Enhance brand impersonation detection for IRS
in-test-rules
PR is in our testing suite to collect telemetry
#3811
opened Jan 21, 2026 by
peterdj45
Loading…
Create attachment_fake_lawyer_sports_agent.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3808
opened Jan 21, 2026 by
MSAdministrator
Loading…
Create brand_impersonation_google_meet.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3805
opened Jan 20, 2026 by
keaton-sublime
•
Draft
Create headers_microsoft_auth_bypass.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3802
opened Jan 17, 2026 by
MSAdministrator
Loading…
Enhance impersonation detection for Chase emails
in-test-rules
PR is in our testing suite to collect telemetry
#3801
opened Jan 16, 2026 by
peterdj45
Loading…
Refactor sync scripts with shared library and bot authentication
#3799
opened Jan 16, 2026 by
aidenmitchell
Loading…
5 tasks done
Create recon_hotel_booking_reply_to_redirect.yml
in-test-rules
PR is in our testing suite to collect telemetry
#3797
opened Jan 16, 2026 by
JFarina5
Loading…
Update impersonation_netflix.yml
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3792
opened Jan 15, 2026 by
markmsublime
Loading…
New Rule (brand impersonation): openai suspicious payment indicators
hunting-required
Hunts needed to validate rule efficacy
test-rules:excluded:link_analysis
Link analysis in rule, excluding from test rules
#3790
opened Jan 15, 2026 by
brycampbell
Loading…
Add detection rule for suspicious Google Meet invitations
in-test-rules
PR is in our testing suite to collect telemetry
#3789
opened Jan 15, 2026 by
peterdj45
Loading…
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.