Improved detections based on telemetry.#3971

Merged

P4T12ICK merged 19 commits intodevelopfrom

detections_improvement

Mar 27, 2026

Commits on Mar 26, 2026

Improved detections based on telemetry.
P4T12ICK
committed
Merge branch 'develop' into detections_improvement
P4T12ICK
authored
bug fix
P4T12ICK
committed
bug fix
P4T12ICK
committed
bumped version numbers and dates
P4T12ICK
committed
bug fix
P4T12ICK
committed
bug fixes
P4T12ICK
committed
bug fix
P4T12ICK
committed
bug fix
P4T12ICK
committed
Update detections/endpoint/anomalous_usage_of_7zip.yml

P4T12ICK
and
nasbench
authored
Update detections/endpoint/conti_common_exec_parameter.yml

P4T12ICK
and
nasbench
authored
Update detections/endpoint/system_user_discovery_with_whoami.yml

P4T12ICK
and
nasbench
authored
Update detections/endpoint/windows_application_whitelisting_bypass_attempt_via_rundll32.yml

P4T12ICK
and
nasbench
authored
Update detections/endpoint/windows_account_access_removal_via_logoff_exec.yml

P4T12ICK
and
nasbench
authored

Commits on Mar 27, 2026

updated suggestions
P4T12ICK
committed
changed back to Anomaly
P4T12ICK
committed
bug fix
P4T12ICK
committed
bug fix
P4T12ICK
committed
Update ryuk_wake_on_lan_command.yml
nasbench
committed