by Sublime Security
This repo contains open-source rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
- HTML smuggling
- VIP / Executive impersonation
- Malicious OneNote files
- Malicious LNK files
- Encrypted zips
Follow us on Twitter for updates on new rules and detection capabilities.