sublime-rules icon indicating copy to clipboard operation
sublime-rules copied to clipboard

Published 20 hours ago • verified publisher icon sublime-security

Create link_image_sus_link.yml

Open zoomequipd opened this issue 6 months ago • 5 comments

Description

add coverage

Associated hunts

zoomequipd avatar May 13 '25 04:05 zoomequipd

/update-test-rules

zoomequipd avatar May 13 '25 04:05 zoomequipd

/update-test-rules

zoomequipd avatar May 13 '25 04:05 zoomequipd

/update-test-rules

zoomequipd avatar Jul 01 '25 04:07 zoomequipd

I extended the hunt and the results still look good overall hunt

MSAdministrator avatar Sep 15 '25 20:09 MSAdministrator

Curious if the scope of the rule has changed since the initial hunt was added? This looks very noisy in test rules with a lot of FPs -> https://platform.sublime.security/messages/hunt?huntId=01997753-5697-7df6-9334-ce8e3ef18283 is a recent hunt with the proposed logic? Not sure if you want to huddle on this

IndiaAce avatar Sep 23 '25 16:09 IndiaAce