THREAT-387 Sublime Security Rules - added pack

panther-labs · Sep 17, 2024 · 5e99825 · 5e99825
1 parent ed14f87
commit 5e99825
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/packs/sublime.yml b/packs/sublime.yml
@@ -0,0 +1,15 @@
+AnalysisType: pack
+PackID: PantherManaged.Sublime
+Description: Group of all Sublime detections
+PackDefinition:
+  IDs:
+    - Sublime.Mailbox.Deactivated
+    - Sublime.Message.Source.Deleted.Or.Deactivated
+    - Sublime.Rules.Deleted.Or.Deactivated
+    # Globals used in these detections
+    - panther_base_helpers
+    - panther_sublime_helpers
+    - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
+DisplayName: "Panther Sublime Pack"