| .. |
|
100001-tmp-exec.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100002-reverse-shell-argv.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100003-web-shell-spawn.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100004-curl-pipe-sh.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100060-mprotect-rwx.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100061-mmap-rwx.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100062-memfd-create.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100063-ptrace-attach.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100064-seccomp.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100065-process-vm-readv.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100066-mlock.json
|
Add enrichment and SID coverage gates
|
2026-07-08 17:05:17 -07:00 |
|
100067-interpreter-unusual-public-port.json
|
Add typed host event egress rule
|
2026-07-09 06:04:30 -07:00 |
|
100068-interpreter-unusual-listener.json
|
Expand TUI guidance and host detection coverage
|
2026-07-09 19:16:27 -07:00 |
|
100069-interpreter-persistence-write.json
|
Add host correlation and assurance coverage
|
2026-07-10 04:04:27 -07:00 |
|
100070-persistence-permission-change.json
|
Add host correlation and assurance coverage
|
2026-07-10 04:04:27 -07:00 |
|
100071-interpreter-setuid-root.json
|
Add host correlation and assurance coverage
|
2026-07-10 04:04:27 -07:00 |
|
100072-interpreter-setgid-root.json
|
Add host correlation and assurance coverage
|
2026-07-10 04:04:27 -07:00 |
|
100073-interpreter-unusual-bind.json
|
Add host event rules for bind and capability activity
|
2026-07-10 04:11:33 -07:00 |
|
100076-interpreter-unusual-accept.json
|
Add host event rules for bind and capability activity
|
2026-07-10 04:11:33 -07:00 |
|
100077-interpreter-capset-sensitive.json
|
Add host event rules for bind and capability activity
|
2026-07-10 04:11:33 -07:00 |
|
100078-module-load-writable-path.json
|
Add host event rules for bind and capability activity
|
2026-07-10 04:11:33 -07:00 |
