Last released Sep 18, 2026
Detection-as-code: Sigma rules compiled to Splunk SPL, Sentinel KQL and DuckDB SQL, replay-tested on synthetic telemetry.