Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
153 Open 4,203 Closed
153 Open 4,203 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add YARA rule compilation validation to CI
#4357 opened Apr 15, 2026 by aidenmitchell Member Loading…
1 of 2 tasks
Create attachment_pdf_base64_javascript_eval.yml
#4355 opened Apr 15, 2026 by keaton-sublime Member • Draft
Create impersonation_openai_payment_issues.yml in-test-rules PR is in our testing suite to collect telemetry
#4354 opened Apr 15, 2026 by hadojae Member Loading…
Create attachment_pdf_CVE_2026_34621_lures.yml
#4352 opened Apr 15, 2026 by keaton-sublime Member • Draft
Create attachment_pdf_with_jsfck_yara.yml
#4351 opened Apr 15, 2026 by keaton-sublime Member • Draft
Update observed IOC rules - 2026-04-15 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4350 opened Apr 15, 2026 by github-actions bot • Draft
3 tasks
4
Add "ICS Phishing" attack type to calendar/ICS rules shared-samples:excluded:bulk_rules test-rules:excluded:bulk_rules Bulk rule update, excluded from test rules
#4344 opened Apr 14, 2026 by aidenmitchell Member Loading…
1
Update bec_urgent_suspicious_patterns.yml in-test-rules PR is in our testing suite to collect telemetry
#4342 opened Apr 13, 2026 by JFarina5 Member Loading…
Update DocuSign Impersonation Rule Link Keywords in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4336 opened Apr 10, 2026 by missingn0pe Member Loading…
Update brand_impersonation_robinhood.yml in-test-rules PR is in our testing suite to collect telemetry
#4319 opened Apr 6, 2026 by cybher0808 Member Loading…
@cybher0808
Create body_spouse_fake_call.yml in-test-rules PR is in our testing suite to collect telemetry
#4317 opened Apr 6, 2026 by keaton-sublime Member • Draft
1
Create credential_theft_new_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#4311 opened Apr 3, 2026 by cybher0808 Member Loading…
@cybher0808
Create body_html_hidden_conversation.yml in-test-rules PR is in our testing suite to collect telemetry
#4308 opened Apr 3, 2026 by D-Bolton Member Loading…
Create body_ai_gen_credential_theft_suspect_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4304 opened Apr 3, 2026 by IndiaAce Member Loading…
Update qr_code_suspicious_indicators.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4301 opened Apr 2, 2026 by hadojae Member Loading…
1
Create callback_scam_file_extensions.yml in-test-rules PR is in our testing suite to collect telemetry
#4300 opened Apr 2, 2026 by cybher0808 Member Loading…
@cybher0808
1
Create link_base64_encoded_email_in_url_parameters_self_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4291 opened Apr 1, 2026 by D-Bolton Member Loading…
Update fake_thread_suspicious_indicators.yml in-test-rules PR is in our testing suite to collect telemetry
#4289 opened Apr 1, 2026 by IndiaAce Member Loading…
Create self_sender_display_name_email_in_subject.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4285 opened Mar 31, 2026 by D-Bolton Member Loading…
8
Refactor exclusion logic for low reputation links in-test-rules PR is in our testing suite to collect telemetry
#4281 opened Mar 31, 2026 by peterdj45 Member Loading…
Refine detection rules for SharePoint fake file shares in-test-rules PR is in our testing suite to collect telemetry
#4280 opened Mar 31, 2026 by peterdj45 Member Loading…
Create impersonate_hubspot_suspicious_content.yml in-test-rules PR is in our testing suite to collect telemetry
#4277 opened Mar 30, 2026 by IndiaAce Member Loading…
Negate SharePoint shares with Mimecast rewrites in-test-rules PR is in our testing suite to collect telemetry
#4276 opened Mar 30, 2026 by peterdj45 Member Loading…
Negate SharePoint file shares with Mimecast rewrites in-test-rules PR is in our testing suite to collect telemetry
#4275 opened Mar 30, 2026 by peterdj45 Member Loading…
Add Unicode homoglyph BEC and Glassworm invisible Unicode payload detection rules shared-samples:excluded:author_membership test-rules:excluded:author_membership
#4267 opened Mar 26, 2026 by yana-ivanov Loading…
11
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.