All pull requests

Pull requests

• Update generic_pdf.yar

  review-needed
  #5785·keaton-sublime opened Nov 2, 2026Member·

  ·
  1

• Update service_abuse_zoho_meeting_callback.yml

  in-test-rules
  #5784·JFarina5 opened Nov 2, 2026Member·

  ·

• Update service_abuse_microsoft_messaging_suspicious_link.yml

  hunting-requiredtest-rules:excluded:link_analysis
  #5782·D-Bolton opened Nov 2, 2026Member·

  ·
  1

• Create link_appspot_cred_theft.yml

  in-test-rulesreview-needed
  #5780·missingn0pe opened Nov 2, 2026Member·

  ·
  1

• Update impersonation_sharepoint_body_credential_theft.yml

  in-test-rules
  #5779·IndiaAce opened Nov 2, 2026Member·

  ·

• Create attachment_pdf_quickbooks_image_lure.yml

  in-test-rules
  #5778·keaton-sublime opened Nov 2, 2026Member·

  ·

• Create hex_encoded_rcpt_subject.yml

  in-test-rules
  #5777·markmsublime opened Nov 2, 2026Member·

  ·

• Create service_abuse_free_form_hotel_booking_link.yml

  in-test-rulesreview-needed
  #5776·missingn0pe opened Nov 2, 2026Member·

  ·

• Update attachment_ics_voicemail_lure.yml

  hunting-requiredtest-rules:excluded:link_analysis
  #5769·markmsublime opened Oct 30, 2026Member·

  ·
  1

• Update impersonation_quickbooks.yml

  in-test-rules
  #5768·markmsublime opened Oct 30, 2026Member·

  ·

• Add ArtemisHex community rule feed

  review-neededshared-samples:excluded:author_membershiptest-rules:excluded:author_membership
  #5751·yana-ivanov opened Oct 29, 2026Contributor·

  ·
  1

  

• Update service_abuse_google_cred_theft.yml

  in-test-rules
  #5744·IndiaAce opened Oct 28, 2026Member·

  ·

• Update credential_phishing_generic_template.yml

  in-test-rulesreview-needed
  #5743·missingn0pe opened Oct 28, 2026Member·

  ·
  2

  

• Update impersonation_netflix.yml

  hunting-requiredtest-rules:excluded:link_analysis
  #5739·markmsublime opened Oct 28, 2026Member·

  ·
  1

• Use ml.attack_score_flash() in prompt injection rules

  in-test-rules
  #5736·sublimebrian opened Oct 28, 2026Member·

  ·

• Test for Domain Reputation POV

  in-test-rules
  #5713·dlynch-sublime opened Oct 23, 2026Member·

  ·
  1

• Create link_rfp_lure.yml

  in-test-rules
  #5695·keaton-sublime opened Oct 22, 2026Member·

  ·

• Create attachment_pdf_guardbreak.yml

  in-test-rules
  #5676·keaton-sublime opened Oct 19, 2026Member·

  ·

• Create sanctioned_country_list.yml

  in-test-rulesreview-neededshared-samples:excluded:author_membership
  #5655·brycampbell opened Oct 15, 2026Contributor·

  ·
  2

• Link: add msi, hta and ps1 to suspicious download file types

  review-neededshared-samples:excluded:author_membershiptest-rules:excluded:author_membership
  #5622·yana-ivanov opened Oct 10, 2026Contributor·

  ·
  1

• Create attachment_pdf_ssa_lure.yml

  in-test-rules
  #5617·keaton-sublime opened Oct 9, 2026Member·

  ·

• Create attachment_pdf_onedrive_blue_lure.yml

  in-test-rulesreview-needed
  #5616·keaton-sublime opened Oct 9, 2026Member·

  ·
  1

• Create link_self_sender_cred_theft_min_js.yml

  hunting-requiredtest-rules:excluded:link_analysis
  #5591·D-Bolton opened Oct 7, 2026Member·

  ·
  1

• Create headers_ref_msgid_history_new_sender.yml

  in-test-rules
  #5557·zoomequipd opened Oct 5, 2026Member·

  ·

• Add CVE-2026-20841 rule

  in-test-rules
  #5526·randypargman opened Oct 1, 2026Member·

  ·