• Sublime Core Feed

Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Sublime Security
Last updated Jul 17th, 2025
Feed Source
GitHub
Tactic or Technique is
Rule Name & Severity
Author
Last Updated
Labels
Attachment: EML file with IPFS links
Sublime Security
1y ago
Apr 25th, 2024
Credential Phishing
Evasion
Free file host
Free subdomain host
IPFS
File analysis
URL analysis
/feeds/core/detection-rules/attachment-eml-file-with-ipfs-links-1fe9d7e7
Credential phishing: Engaging language with IPFS link
Sublime Security
1y ago
May 3rd, 2024
Credential Phishing
Free file host
Free subdomain host
IPFS
Content analysis
Natural Language Understanding
URL analysis
/feeds/core/detection-rules/credential-phishing-engaging-language-with-ipfs-link-996c4d83
Link: IPFS
Sublime Security
3d ago
Jul 16th, 2025
Credential Phishing
Malware/Ransomware
Free file host
Free subdomain host
IPFS
Sender analysis
URL analysis
/feeds/core/detection-rules/link-ipfs-19fa6442
Vendor Compromise: GovDelivery Message With Suspicious Link
Sublime Security
1mo ago
Jun 4th, 2025
Credential Phishing
Malware/Ransomware
Free subdomain host
IPFS
Social engineering
Evasion
Impersonation: Brand
Natural Language Understanding
URL analysis
Whois
/feeds/core/detection-rules/vendor-compromise-govdelivery-message-with-suspicious-link-0d2d5172
4 Rules