fix(deceptive-bytes): align parsed fields and correlation consumers - #2666

Merged

osmontero merged 7 commits into

utmstack:v11from

kryonsx:codex/v11-deceptive-bytes-review-20260923

Sep 25, 2026

Commits on Sep 23, 2026

fix(deceptive-bytes): align parsed fields and rule consumers
kryonsx
committed
f32daf9

Commits on Sep 24, 2026

fix(deceptive-bytes): only run history searches whose placeholders exist

kryonsx
and
claude
committed
328df64
Merge official v11 (d2479c1a) into the Deceptive Bytes draft

kryonsx
and
claude
committed
01589a0
fix(deceptive-bytes): read the underscored vendor keys KV keeps on go-sdk v1.1.36

kryonsx
and
claude
committed
dd8d52c
docs(deceptive-bytes): record re-validation on the latest v11, go-sdk and engine

kryonsx
and
claude
committed
7ba2d4b
fix(deceptive-bytes): only run the ransomware history search when its placeholders exist

kryonsx
and
claude
committed
aa24e59
docs(deceptive-bytes): note that the ransomware rule now differs from v11 by its guard

kryonsx
and
claude
committed
d888b53