Issues

• feat(rules): detection backlog from the 2026-10 audit

  enhancement
  Karib0u/rustinel-rules#81 · Filter by author Karib0u opened on Oct 1, 2026 · v0.5.0

• ci(validation): adopt rustinel sigma doctor for packs and Preview

  enhancementgithub_actions
  Karib0u/rustinel-rules#73 · Filter by author Karib0u opened on Oct 1, 2026 · v0.5.0

• test(atomic): add smoke tests for uncovered detector paths

  enhancement
  Karib0u/rustinel-rules#61 · Filter by author Karib0u opened on Sep 11, 2026 · v0.4.0

• feat(rules): measured expansion wave 1 for untested telemetry channels

  enhancement
  Karib0u/rustinel-rules#60 · Filter by author Karib0u opened on Sep 11, 2026 · v0.5.0
  1

• test(atomic): add firing tests for remaining production detections

  enhancement
  Karib0u/rustinel-rules#59 · Filter by author Karib0u opened on Sep 11, 2026 · v0.4.0

• chore(roadmap): complete audit remediation for v0.4.0

  enhancement
  Karib0u/rustinel-rules#52 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• feat(candidates): add a curated upstream Sigma pipeline

  enhancement
  Karib0u/rustinel-rules#51 · Filter by author Karib0u opened on Sep 4, 2026 · v0.6.0

• feat(preview): validate blockers and test latest-engine compatibility

  enhancementgithub_actions
  Karib0u/rustinel-rules#50 · Filter by author Karib0u opened on Sep 4, 2026 · v0.5.0
  1

• feat(metadata): validate applicability, ATT&CK, and provenance

  enhancement
  Karib0u/rustinel-rules#49 · Filter by author Karib0u opened on Sep 4, 2026 · v0.5.0
  2

• feat(windows): add curated Security and ps_module coverage

  enhancement
  Karib0u/rustinel-rules#48 · Filter by author Karib0u opened on Sep 4, 2026 · v0.5.0

• fix(macos): correct and retier current Sigma rules

  bug
  Karib0u/rustinel-rules#47 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• fix(linux): correct and retier current Sigma rules

  bug
  Karib0u/rustinel-rules#46 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• fix(yara): correct provenance and harden signatures

  bug
  Karib0u/rustinel-rules#45 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• fix(packs): retier Essential around evidence and response safety

  bug
  Karib0u/rustinel-rules#44 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  2

• test(rules): add benign regression cases for noisy rules

  enhancement
  Karib0u/rustinel-rules#43 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0

• fix(network): use Initiated and correct outbound rule claims

  bug
  Karib0u/rustinel-rules#42 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• fix(windows): tune PowerShell and scheduled-task detections

  bug
  Karib0u/rustinel-rules#41 · Filter by author Karib0u opened on Sep 4, 2026 · v0.5.0
  1

• fix(windows): correct high-risk process detection logic

  bug
  Karib0u/rustinel-rules#40 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0

• fix(windows): align registry rules with v1.4.1 semantics

  bug
  Karib0u/rustinel-rules#39 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  1

• feat(lifecycle): add Preview rules and enforce production boundaries

  enhancement
  Karib0u/rustinel-rules#36 · Filter by author Karib0u opened on Sep 4, 2026 · v0.4.0
  2

• feat(validation): add pinned RSigma checks

  enhancement
  Karib0u/rustinel-rules#17 · Filter by author Karib0u opened on Jun 17, 2026 · v0.5.0
  1