fix(crowdstrike): keep command lines intact and repair rule conditions and grouping - #2744

Merged

osmontero merged 6 commits into

utmstack:v11from

kryonsx:codex/v11-crowdstrike-review-20260924

Sep 25, 2026

Commits on Sep 24, 2026

fix(crowdstrike): keep command lines as sent

kryonsx
and
claude
committed
57dcb12
refactor(crowdstrike): remove three renames that repeat earlier ones

kryonsx
and
claude
committed
eb9c17c
fix(crowdstrike): drop the event_simpleName test from five command-line rules

kryonsx
and
claude
committed
751d8a4
fix(crowdstrike): group and deduplicate alerts by adversary fields

kryonsx
and
claude
committed
7d7bce7
test(crowdstrike): regression for the review corrections

kryonsx
and
claude
committed
7663d34
docs(crowdstrike): record the review, its proof and what is deferred

kryonsx
and
claude
committed
4cc064a