-
Notifications
You must be signed in to change notification settings - Fork 54
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
feat(engine): add an all-matches Sigma alert mode
engineDetection engine workDetection engine workenhancementNew feature or requestNew feature or requestp3Backlog; larger or lower-urgency workBacklog; larger or lower-urgency workStatus: Open.#195 In Karib0u/rustinel;docs(sigma): reconcile runtime capability and limitation documentation
documentationImprovements or additions to documentationImprovements or additions to documentationengineDetection engine workDetection engine workp1Important but not required for next cycleImportant but not required for next cycletrackingUmbrella issue tracking related workUmbrella issue tracking related workStatus: Open.#191 In Karib0u/rustinel;test(engine): add RSigma-specific Sigma conformance coverage
engineDetection engine workDetection engine workp3Backlog; larger or lower-urgency workBacklog; larger or lower-urgency worktestingTest coverage and verificationTest coverage and verificationStatus: Open.#190 In Karib0u/rustinel;fix(engine): preserve match-debug parity in the RSigma backend
bugSomething isn't workingSomething isn't workingengineDetection engine workDetection engine workp3Backlog; larger or lower-urgency workBacklog; larger or lower-urgency workStatus: Open.#189 In Karib0u/rustinel;feat(sigma): add per-rule compatibility diagnostics to rustinel doctor
dxDeveloper and operator experienceDeveloper and operator experienceengineDetection engine workDetection engine workenhancementNew feature or requestNew feature or requestepicLarge or cross-cutting workLarge or cross-cutting workp2Useful hardening; schedule when capacity allowsUseful hardening; schedule when capacity allowstrackingUmbrella issue tracking related workUmbrella issue tracking related workStatus: Open.#184 In Karib0u/rustinel;feat(alerts): preserve Sigma metadata and severity semantics in ECS output
engineDetection engine workDetection engine workenhancementNew feature or requestNew feature or requestp1Important but not required for next cycleImportant but not required for next cycleStatus: Open.#182 In Karib0u/rustinel;fix(engine): prevent low-severity Sigma rules from shadowing higher-severity matches
bugSomething isn't workingSomething isn't workingengineDetection engine workDetection engine workp1Important but not required for next cycleImportant but not required for next cycleStatus: Open.#183 In Karib0u/rustinel;fix(engine): report unsupported Sigma correlations and filters
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationengineDetection engine workDetection engine workp1Important but not required for next cycleImportant but not required for next cycleStatus: Open.#179 In Karib0u/rustinel;test(config): isolate path tests from managed host configuration
bugSomething isn't workingSomething isn't workingdxDeveloper and operator experienceDeveloper and operator experiencep2Useful hardening; schedule when capacity allowsUseful hardening; schedule when capacity allowstestingTest coverage and verificationTest coverage and verificationStatus: Open.#171 In Karib0u/rustinel;fix(dedup): implement the documented sliding-window semantics
bugSomething isn't workingSomething isn't workingengineDetection engine workDetection engine workobservabilityTelemetry and operational visibilityTelemetry and operational visibilityp2Useful hardening; schedule when capacity allowsUseful hardening; schedule when capacity allowsStatus: Open.#170 In Karib0u/rustinel;fix(linux-file): preserve absolute path identity and report truncation
bugSomething isn't workingSomething isn't workinglinuxLinux supportLinux supportp1Important but not required for next cycleImportant but not required for next cyclesensorSensor and telemetry workSensor and telemetry workStatus: Open.#168 In Karib0u/rustinel;feat(yara): add per-scan timeout and max file size guard
enhancementNew feature or requestNew feature or requestp1Important but not required for next cycleImportant but not required for next cycleyaraYARA integrationYARA integrationStatus: Open.#162 In Karib0u/rustinel;