The following lists prebuilt rule updates per release. Only rules with significant modifications to their query or scope are listed. For detailed information about a rule’s changes, see the rule’s description page.
These prebuilt rules have been removed:
- Execution via Signed Binary
- Suspicious Process spawning from Script Interpreter
- Suspicious Script Object Execution
These prebuilt rules have been updated: