Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Dec 26th, 2025
Feed Source
GitHub
Detection Method is
Rule Name & Severity
Last Updated
Attachment: DOCX with hyperlink targeting recipient address
Sublime Security
11d ago
Dec 17th, 2025
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
/feeds/core/detection-rules/attachment-docx-with-hyperlink-targeting-recipient-address-9ec8fa49
Attachment: Embedded Javascript in SVG file
Sublime Security
4mo ago
Aug 8th, 2025
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
/feeds/core/detection-rules/attachment-embedded-javascript-in-svg-file-f70293bc
Attachment: SVG files with evasion elements
Sublime Security
4mo ago
Aug 8th, 2025
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
/feeds/core/detection-rules/attachment-svg-files-with-evasion-elements-5d2dbb60
3 Rules