Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Oct 6th, 2026
Feed Source
GitHub
Tactic or Technique is
Rule Name & Severity
Last Updated
Observed IOC: Malicious reply-to domains
Sublime Security
5mo ago
Apr 27th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
Observed IOC: Malicious reply-to root domains
Sublime Security
5mo ago
Apr 27th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
Observed IOC: Malicious sender domains
Sublime Security
8d ago
Sep 28th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
Observed IOC: Malicious sender root domains
Sublime Security
44m ago
Oct 6th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
4 Rules