* refresh to latest ATT&CK 7.2 * add new unit test to further validate threat mappings * updated threat mappings in rules to reflect changes * new func to download and refresh mitre data based on version
* Create ml_linux_rare_kernel_module_arguments.toml * rare module rule * Update ml_linux_anomalous_kernel_module_arguments.toml * Update ml_linux_anomalous_kernel_module_arguments.toml * Update ml_linux_anomalous_kernel_module_arguments.toml * Update rules/ml/ml_linux_anomalous_kernel_module_arguments.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>