Contribute a detection

Especially valued: detection engineers submitting battle-tested rules with reported false-positive rates from production.

Quality bar

• Rules must be tested in a production environment for ≥ 30 days.
• Submission must include reported false-positive rate (% of triggers that were genuine).
• Required tuning steps must be documented.
• Required data sources must be enumerated.
• Author attribution is permanent.
• No vendor-supplied marketing rules.

How to submit

Open a PR at github.com/emmanuelgjr/Shadow-AI-Defense.