-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Evidence pack integrity hash does not cover meta, so the date range and producer can be rewritten
bugSomething isn't workingSomething isn't workingStatus: Open.#75 In blitzcrieg1/agentmetry;Ingest Claude Code OpenTelemetry as a third capture tier
enhancementNew feature or requestNew feature or requestStatus: Open.#56 In blitzcrieg1/agentmetry;Observable techniques collapse into T1059 because the mapper only upgrades on credentials and egress
detection-ruleBehavioral sequence detectionBehavioral sequence detectionStatus: Open.#55 In blitzcrieg1/agentmetry;remote-staging-then-execute fires critical on any GitHub-raw fetch plus any later python -c, with no link between them
detection-ruleBehavioral sequence detectionBehavioral sequence detectionStatus: Open.#51 In blitzcrieg1/agentmetry;A pipe into an interpreter is treated as remote code even when the interpreter is running its own script
detection-ruleBehavioral sequence detectionBehavioral sequence detectionStatus: Open.#50 In blitzcrieg1/agentmetry;A credential path named inside an MCP tool argument is classified as a credential read
detection-ruleBehavioral sequence detectionBehavioral sequence detectionStatus: Open.#49 In blitzcrieg1/agentmetry;Agent-directed techniques have no taxonomy, so MCP schema changes and injection carriers ship unlabelled
enhancementNew feature or requestNew feature or requestStatus: Open.#47 In blitzcrieg1/agentmetry;Tool responses are not recorded, so the trail cannot see how much data moved
enhancementNew feature or requestNew feature or requestStatus: Open.#45 In blitzcrieg1/agentmetry;.env.exampleis classified as credential access, manufacturing critical findingsdetection-ruleBehavioral sequence detectionBehavioral sequence detectionStatus: Open.#44 In blitzcrieg1/agentmetry;Events carry no project, so one trail mixes every repo on the machine
enhancementNew feature or requestNew feature or requestStatus: Open.#37 In blitzcrieg1/agentmetry;Six of fifteen built-in rules have no benchmark corpus coverage
help wantedExtra attention is welcomeExtra attention is welcomeStatus: Open.#36 In blitzcrieg1/agentmetry;Extract an EventStore protocol before adding a second storage backend
enhancementNew feature or requestNew feature or requestStatus: Open.#35 In blitzcrieg1/agentmetry;