• Sublime Core Feed

Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Sublime Security
Last updated Mar 30th, 2026
Feed Source
GitHub
Detection Method is
Rule Name & Severity
Author
Last Updated
Labels
Attachment: DOCX with hyperlink targeting recipient address
Sublime Security
3mo ago
Dec 17th, 2025
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Attachment: Embedded Javascript in SVG file
Sublime Security
2mo ago
Jan 12th, 2026
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Attachment: SVG files with evasion elements
Sublime Security
7mo ago
Aug 8th, 2025
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
3 Rules