Add new section: 'Email Monitoring'

README.html

@@ -19,6 +19,7 @@
 <li><a href="#detection-alerting-and-automation-platforms">Detection, Alerting and Automation Platforms</a></li>
 <li><a href="#endpoint-monitoring">Endpoint Monitoring</a></li>
 <li><a href="#network-monitoring">Network Monitoring</a></li></ul></li>
+<li><a href="#email-monitoring">Email Monitoring</a></li></ul></li>
 <li>🔍 <a href="#detection-rules">Detection Rules</a></li>
 <li>📑 <a href="#dataset">Dataset</a></li>
 <li>📘 <a href="#resources">Resources</a><ul>
@@ -136,6 +137,10 @@
 <li><a href="https://github.com/CERT-Polska/hfinger">Hfinger</a> - Fingerprinting HTTP requests</li>
 <li><a href="https://github.com/salesforce/jarm">JARM</a> - An active Transport Layer Security (TLS) server fingerprinting tool.</li>
 </ul>
+<h3 id="email-monitoring">Email Monitoring</h3>
+<ul>
+<li><a href="https://github.com/sublime-security/sublime-platform">Sublime Platform</a> - An email threat detection engine</li>
+</ul>
 <h2 id="detection-rules">Detection Rules</h2>
 <ul>
 <li><a href="https://github.com/SigmaHQ/sigma">Sigma</a> - Generic Signature Format for SIEM Systems</li>

README.md

@@ -11,6 +11,7 @@
     - [Detection, Alerting and Automation Platforms](#detection-alerting-and-automation-platforms)
     - [Endpoint Monitoring](#endpoint-monitoring)
     - [Network Monitoring](#network-monitoring)
+    - [Email Monitoring](#email-monitoring)
   - 🔍 [Detection Rules](#detection-rules)
   - 📑 [Dataset](#dataset)
   - 📘 [Resources](#resources)
@@ -130,6 +131,10 @@
 - [Hfinger](https://github.com/CERT-Polska/hfinger) - Fingerprinting HTTP requests
 - [JARM](https://github.com/salesforce/jarm) - An active Transport Layer Security (TLS) server fingerprinting tool.
 
+### Email Monitoring
+
+- [Sublime Platform](https://github.com/sublime-security/sublime-platform) - An email threat detection engine
+
 ## Detection Rules
 
 - [Sigma](https://github.com/SigmaHQ/sigma) - Generic Signature Format for SIEM Systems