Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Sublime Security

Last updated Jul 27th, 2026

Feed Source

GitHub

Detection Method is

Rule Name & Severity	Author	Last Updated	Labels
VIP local_part impersonation from unsolicited sender	Sublime Security	11mo ago Aug 12th, 2025	Impersonation: VIP Spoofing Header analysis Sender analysis
Xero infrastructure abuse	Sublime Security	8mo ago Nov 3rd, 2025	Credential Phishing Evasion Social engineering Content analysis Header analysis Natural Language Understanding URL analysis
X (Twitter) impersonation with credential phishing motives	Sublime Security	2mo ago May 15th, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision File analysis Header analysis Optical Character Recognition Natural Language Understanding Sender analysis
Zoom Events newsletter abuse	Sublime Security	19d ago Jul 8th, 2026	Credential Phishing Free file host Free subdomain host Social engineering Impersonation: Brand Header analysis HTML analysis Natural Language Understanding URL analysis

404 Rules

Page 9 of 9