Rules that already passed review.

Public detection-as-code with the review attached: quality score, false-positive risk, ATT&CK coverage and the source behind each decision. Fork one and it lands in your editor.