Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
70 Open 5,267 Closed
70 Open 5,267 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Create attachment_pdf_doc_portal_cred_theft_lure.yml in-test-rules PR is in our testing suite to collect telemetry
#5338 opened Sep 13, 2026 by IndiaAce Member Loading…
Update observed IOC rules - 2026-09-14 shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5337 opened Sep 12, 2026 by github-actions Bot Loading…
3
Added country and EU tag to each EU member state rule
#5336 opened Sep 11, 2026 by randypargman Member Loading…
Update uk dlp rules meta only review-needed Indicates that a PR is waiting for review
#5335 opened Sep 11, 2026 by randypargman Member Loading…
@Jummyberry
1
Update credential_phishing_generic_document_sharing.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5334 opened Sep 11, 2026 by missingn0pe Member Loading…
1
Create link_google_share_google.yml in-test-rules PR is in our testing suite to collect telemetry
#5333 opened Sep 11, 2026 by zoomequipd Member Loading…
Rename Fuzzy Attack Score on Graymail
#5332 opened Sep 11, 2026 by dlynch-sublime Member • Draft
Update impersonation_social_SA.yml in-test-rules PR is in our testing suite to collect telemetry
#5331 opened Sep 11, 2026 by JFarina5 Member Loading…
Add beta DLP rule for MSIP sensitivity label outbound detection review-needed Indicates that a PR is waiting for review shared-samples:excluded:author_membership test-rules:excluded:author_membership
#5330 opened Sep 11, 2026 by Jummyberry Contributor Loading…
1
Update and rename attachment_pdf_obj_hash_cred_phish.yml to pdf_objec… in-test-rules PR is in our testing suite to collect telemetry
#5329 opened Sep 11, 2026 by keaton-sublime Member Loading…
Refine attachment checks in mobile solicitation rule in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5326 opened Sep 10, 2026 by randypargman Member Loading…
@markmsublime
2
Update BEC rule to match intent of no attachments other than banners in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5325 opened Sep 10, 2026 by randypargman Member Loading…
@markmsublime
2
Update abuse_fliphtml5 rule replace zero attachment logic in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5324 opened Sep 10, 2026 by randypargman Member Loading…
@markmsublime
2
CI: map rule validation diagnostics to their real file line
#5323 opened Sep 10, 2026 by zoomequipd Member Loading…
6 tasks done
Update attachment filtering in Docusign rule in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5322 opened Sep 10, 2026 by randypargman Member Loading…
@markmsublime
2
Create impersonation_kroger.yml in-test-rules PR is in our testing suite to collect telemetry
#5319 opened Sep 10, 2026 by JFarina5 Member Loading…
Create sender_suspicious_cc_display_name.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#5317 opened Sep 10, 2026 by D-Bolton Member Loading…
1
Update impersonation_brand_wix.yml in-test-rules PR is in our testing suite to collect telemetry
#5314 opened Sep 10, 2026 by JFarina5 Member Loading…
Update attachment_legal_pdf.yml hunting-required Hunts needed to validate rule efficacy test-rules:excluded:link_analysis Link analysis in rule, excluding from test rules
#5303 opened Sep 9, 2026 by missingn0pe Member Loading…
2
Create link_trac_link_jwt_encoded.yml in-test-rules PR is in our testing suite to collect telemetry
#5301 opened Sep 9, 2026 by missingn0pe Member Loading…
Temporarily bulk-sync all DLP discovery rules to test-rules
#5297 opened Sep 8, 2026 by aidenmitchell Member Loading…
3 tasks
2
Create body_html_ascii_smuggling.yml in-test-rules PR is in our testing suite to collect telemetry
#5288 opened Sep 7, 2026 by zoomequipd Member • Draft
Remove old regex-style Slack token DLP rule review-needed Indicates that a PR is waiting for review
#5285 opened Sep 4, 2026 by randypargman Member Loading…
1 task
2
Create attachment_ics_excessive_self_reply_sender.yml in-test-rules PR is in our testing suite to collect telemetry
#5284 opened Sep 4, 2026 by missingn0pe Member Loading…
Update attachment_ics_sus_prodid.yml in-test-rules PR is in our testing suite to collect telemetry
#5278 opened Sep 4, 2026 by markmsublime Member Loading…
ProTip! Exclude everything labeled bug with -label:bug.