5ae9347663
* [New Rule] Suspicious Calendar File Modification * description * index * excluding FPs by path * Update persistence_suspicious_calendar_modification.toml * Update persistence_suspicious_calendar_modification.toml * Update rules/macos/persistence_suspicious_calendar_modification.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> * Update rules/macos/persistence_suspicious_calendar_modification.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>