Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
131 Open 3,902 Closed
131 Open 3,902 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Enhance Figma link detection for credential theft hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4034 opened Feb 14, 2026 by peterdj45 Loading…
1
Create link_direct_msi_low_rep_domain.yml in-test-rules PR is in our testing suite to collect telemetry
#4033 opened Feb 13, 2026 by zoomequipd Loading…
[senderprofile] Attachment Bulk Set 3 hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules test-rules:excluded:manual Manually excluded from test-rules, either by adding this label or removing the in-test-rules label
#4031 opened Feb 13, 2026 by MSAdministrator Loading…
1
[senderprofile] Attachment Bulk Set 2 hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules test-rules:excluded:manual Manually excluded from test-rules, either by adding this label or removing the in-test-rules label
#4030 opened Feb 13, 2026 by MSAdministrator Loading…
1
[senderprofile] Attachment Bulk Set 1 in-test-rules PR is in our testing suite to collect telemetry
#4029 opened Feb 13, 2026 by MSAdministrator Loading…
[senderprofile] Abuse Bulk Set 1 in-test-rules PR is in our testing suite to collect telemetry
#4028 opened Feb 13, 2026 by MSAdministrator Loading…
Create suspicious_dont_reply_message_with_untrustworthy_links_or_send… in-test-rules PR is in our testing suite to collect telemetry
#4026 opened Feb 13, 2026 by hadojae Loading…
Create urgent_language_with_suspicious_links_from_unsolicited_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#4023 opened Feb 12, 2026 by hadojae Loading…
specific source for close the loop classification changes review-needed Indicates that a PR is waiting for review test-rules:excluded:author_membership
#4022 opened Feb 12, 2026 by blaiseper • Draft
1
Create impersonation_fake_copyright_infringement_notice_from_unsolici… in-test-rules PR is in our testing suite to collect telemetry
#4020 opened Feb 12, 2026 by hadojae Loading…
Negating latest-fedex.com from impersonation detection rule in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4019 opened Feb 12, 2026 by peterdj45 Loading…
New rule: Blue button template file sharing in-test-rules PR is in our testing suite to collect telemetry
#4018 opened Feb 12, 2026 by IndiaAce Loading…
Add detection rule for WordPress login Binance scam in-test-rules PR is in our testing suite to collect telemetry
#4015 opened Feb 12, 2026 by IndiaAce Loading…
New rule: Startup investment solicitation with suspicious indicators in-test-rules PR is in our testing suite to collect telemetry
#4013 opened Feb 12, 2026 by missingn0pe Loading…
Add detection rule for undisclosed recipients with links hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#4011 opened Feb 12, 2026 by peterdj45 Loading…
1
Update impersonation_amex.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4009 opened Feb 11, 2026 by markmsublime Loading…
1
Create link_pdf_icon.yml in-test-rules PR is in our testing suite to collect telemetry
#4007 opened Feb 11, 2026 by keaton-sublime • Draft
Update attachment_qr_with_recipient_targeting_and_special_characters.yml in-test-rules PR is in our testing suite to collect telemetry
#4003 opened Feb 10, 2026 by hadojae Loading…
1
Create attachment_eml_qr_with_recipient_targeting_and_special_charact… in-test-rules PR is in our testing suite to collect telemetry
#4002 opened Feb 10, 2026 by hadojae Loading…
Create attachment_pdf_obj_hash_payment_receipt.yml in-test-rules PR is in our testing suite to collect telemetry
#4001 opened Feb 10, 2026 by JFarina5 Loading…
Create impersonation_display_name_cred_theft_image.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#4000 opened Feb 10, 2026 by D-Bolton Loading…
3
Create attachment_pdf_object_hash_partial_match.yml in-test-rules PR is in our testing suite to collect telemetry
#3996 opened Feb 10, 2026 by keaton-sublime • Draft
Create attachment_embedded_pdf_icon.yml in-test-rules PR is in our testing suite to collect telemetry
#3994 opened Feb 10, 2026 by keaton-sublime • Draft
Enhance spam detection for fake dating profiles in-test-rules PR is in our testing suite to collect telemetry
#3993 opened Feb 10, 2026 by peterdj45 Loading…
4
Create impersonation_law_enforcement_agencies.yml in-test-rules PR is in our testing suite to collect telemetry
#3991 opened Feb 9, 2026 by MSAdministrator Loading…
ProTip! Adding no:label will show everything without a label.