sentry

click_tracking

disable_posthog_tracking

suborganization_creation

hide_hip_progress_bar

expose_inline_message_meta

safelinks_click_tracking

show_enable_inline_processing

ms365_cert_based_auth

mdv_redirect_original_canonical_id_to_cluster_id

ignore_asr_priority_counts

self_serve_fix_gmail_reports

inline_webhook_alerts

force_disable_all_frontend_slurp_restrictions

onboarding_abuse_mailbox_route

mdv_asa

mdv_asa_button_all_messages

mdv_asa_overview_card

asa_full_response

disable_mailboxes_ui

asa_in_eml_analyzer_ui

user_reports_top_reporters_ui

oletools_output_ui

user_reports_top_labels_ui

stratum_mlvs

threat_log_passive_mode

ade_internal_button

export_search_emls

overview_show_malicious_classifications

export_search_emls_limit

graymail_action

run_asa_on_unknown_and_suspicious

ade_share_feedback_ui

ade_agent_reasoning_ui

quantum_hunts_ui

user_reports_overview_v3

enable_asa_in_mlv

attack_insights_overview_v3

share_with_ts_action_id

ts_redirect_base_url

dlp_beta_ui

delete_calendar_events_action

sublime_verdict_ui

search_v1_url

grandchild_org_creation

dlp_ga_ui

feeds_https_auth

message_groups_rule_type_filter

vendor_management_ui

dlp_rules_ui

dlp_public_beta_ui

phishing_sim_ui

pdf_exports_mvp

Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Rule Name & Severity	Author	Last Updated	Labels
Attachment: Embedded Javascript in SVG file	Sublime Security	3mo ago Aug 8th, 2025	Malware/Ransomware Scripting Archive analysis File analysis Sender analysis XML analysis	/feeds/core/detection-rules/attachment-embedded-javascript-in-svg-file-f70293bc
Attachment: SVG files with evasion elements	Sublime Security	3mo ago Aug 8th, 2025	Malware/Ransomware Credential Phishing QR code Image as content Evasion File analysis XML analysis QR code analysis Sender analysis	/feeds/core/detection-rules/attachment-svg-files-with-evasion-elements-5d2dbb60