* [Rule Tuning] Add timestamp_override field to rules * add tests for lookback and timestamp_override * fix dates and add test to ensure updated > creation
* [New Rule] EgShell Backdoor Execution * Update rules/cross-platform/execution_pentest_eggshell_remote_admin_tool.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> * Update rules/cross-platform/execution_pentest_eggshell_remote_admin_tool.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>
Justin Ibarra