intelligence_src_8c9cbb830c20534205
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Oct 11, 2026 21:17 UTC
- Retrieved
- Oct 15, 2026 06:54 UTC
What's Changed Moved default_policy to sigma.policy to re-establish sigma namespace package by @thomaspatzke in #588 fix: compile |re values with the rule's policy by @cristianchiriac in #585 Fix for policy propagation in filters by @thomaspatzke in #589 "Generate: false" being ignored when chaining correlation rules. by @FlomoN in #583 Add alias expansion checks to prevent YAML alias bombs in processing pipeline and validation by @thomaspatzke in #591 Add max expansion limits for windash and placeholders by @thomaspatzke in #592 New Contributors @FlomoN made their first contribution in #583 Full Changelog: v2.0.0...v2.0.1
2a31caa7084c0cf40a8226a848fa00e8dce9cf0327c6d8adcd9b422bb1597f0dNetwork indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.