Skip to content

Update observed IOC rules - 2026-04-22#4350

Draft
github-actions[bot] wants to merge 39 commits intomainfrom
automated-ioc-updates
Draft

Update observed IOC rules - 2026-04-22#4350
github-actions[bot] wants to merge 39 commits intomainfrom
automated-ioc-updates

Conversation

@github-actions
Copy link
Copy Markdown

@github-actions github-actions Bot commented Apr 15, 2026 •
edited
Loading

Summary

Automated IOC update (Last updated: 2026-04-22)

Cumulative Changes Since Last Merge

  • Total Active IOCs: 15
  • Added: 0 IOCs
  • Expired: 1 IOCs

New IOCs

  • (none)

Testing

  • MQL syntax validated
  • SHA-256 hashes verified
  • Expiration dates calculated correctly

Update History

  • 2026-04-22: Added 0 IOC(s) — 15 active IOC(s)
  • 2026-04-21: Added 2 IOC(s) — 15 active IOC(s)
  • 2026-04-17: Added 2 IOC(s) — 12 active IOC(s)
  • 2026-04-15: Added 0 IOC(s) — 10 active IOC(s)
  • 2026-04-15: Added 0 IOC(s) — 10 active IOC(s)
  • 2026-04-15: Added 0 IOC(s) — 10 active IOC(s)
  • 2026-04-15: Initial sync — 11 active IOC(s)

Generated by automated IOC management system
Source: Private threat intel repository

@github-actions github-actions Bot requested a review from a team April 15, 2026 17:43
@github-actions github-actions Bot requested a review from a team as a code owner April 15, 2026 17:43
@github-actions
Copy link
Copy Markdown
Author

github-actions Bot commented Apr 15, 2026

Test Rules Sync - Action Required

This PR was not automatically synced to test-rules because the author is not a member of the sublime-security organization.

To enable syncing, an organization member can comment /update-test-rules on this PR.

Once triggered, the rules will be synced on the next scheduled run (every 10 minutes).

@IndiaAce IndiaAce marked this pull request as draft April 15, 2026 18:13
@IndiaAce IndiaAce marked this pull request as draft April 15, 2026 18:13
@github-actions github-actions Bot changed the title chore: Update observed IOC rules - 2026-04-15 Update observed IOC rules - 2026-04-15 Apr 15, 2026
@github-actions
Copy link
Copy Markdown
Author

github-actions Bot commented Apr 15, 2026

Automated update — 2026-04-15
Rules regenerated from latest IOC CSVs. Force-pushed to automated-ioc-updates.

@github-actions
Copy link
Copy Markdown
Author

github-actions Bot commented Apr 15, 2026

Automated update — 2026-04-15
Rules regenerated from latest IOC CSVs. Force-pushed to automated-ioc-updates.

IndiaAce and others added 2 commits April 15, 2026 15:40
@IndiaAce @claude
chore: Remove redirect target IOC rules
a6ac407 
These rule types have been removed from the IOC management config.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Auto-format MQL and add rule IDs
52bc71e
@github-actions github-actions Bot added shared-samples:excluded:author_membership in-test-rules PR is in our testing suite to collect telemetry labels Apr 17, 2026
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious domains i…
1fbfcfc 
…n body links
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious root doma…
938e7d4 
…ins in body links
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious URLs in b…
e7a869b 
…ody links
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious sender do…
1f04456 
…mains
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious sender em…
51ddbcd 
…ail addresses
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
@github-actions
[Test Rules] [PR #4350] added rule: Observed IOC: Malicious sender ro…
f8c1b3a 
…ot domains
@github-actions github-actions Bot changed the title Update observed IOC rules - 2026-04-17 Update observed IOC rules - 2026-04-21 Apr 21, 2026
@github-actions
Copy link
Copy Markdown
Author

github-actions Bot commented Apr 21, 2026

Automated update — 2026-04-21
Rules regenerated from latest IOC CSVs. Force-pushed to automated-ioc-updates.

github-actions Bot added a commit that referenced this pull request Apr 21, 2026
@github-actions
[Test Rules] [PR #4350] modified rule: Observed IOC: Malicious sender…
4805fa5 
… domains
github-actions Bot added a commit that referenced this pull request Apr 21, 2026
@github-actions
[Test Rules] [PR #4350] modified rule: Observed IOC: Malicious sender…
eccdd66 
… email addresses
@github-actions github-actions Bot changed the title Update observed IOC rules - 2026-04-21 Update observed IOC rules - 2026-04-22 Apr 22, 2026
@github-actions
Copy link
Copy Markdown
Author

github-actions Bot commented Apr 22, 2026

Automated update — 2026-04-22
Rules regenerated from latest IOC CSVs. Force-pushed to automated-ioc-updates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

in-test-rules PR is in our testing suite to collect telemetry shared-samples:excluded:author_membership

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@IndiaAce @zoomequipd