This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
The following lists prebuilt rule updates per release. Only rules with significant modifications to their query or scope are listed. For detailed information about a rule’s changes, see the rule’s description page.
These prebuilt rules have been removed:
- Execution via Signed Binary
- Suspicious Process spawning from Script Interpreter
- Suspicious Script Object Execution
These prebuilt rules have been updated: