Every rule, tested and written up.

A working list of the detections I write: what behavior each one catches, which logs it needs, how I tested it, and what it gets wrong. Open any row for the full case file. Items shown are planned study topics, not completed detections.