Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

ER723/detection-as-code

https://github.com/ER723/detection-as-code · scanned 2026-09-09 12:41 UTC (2 days, 15 hours ago)

1 raw signals (0 security + 1 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 days, 15 hours ago · v1 · 1 actionable finding from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
95.0
/100
Security checks
95
0 findings
System graph
95
30.0% cov · 1 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 0 Medium 1 Low 0 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 1 Crowd 0 Layer: Security 1

All 26 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
README.md software healthy README.md
sigma_evaluator.py software healthy tests/sigma_evaluator.py
test_rules.py software healthy tests/test_rules.py
lsass_access.json software healthy tests/fixtures/lsass_access.json
cron_persistence.json software healthy tests/fixtures/cron_persistence.json
powershell_encoded_command.json software healthy tests/fixtures/powershell_encoded_command.json
powershell_encoded_command.yml software healthy rules/powershell_encoded_command.yml
lsass_access.yml software healthy rules/lsass_access.yml
cron_persistence.yml software healthy rules/cron_persistence.yml
test-evidence.md software healthy docs/test-evidence.md
test.yml software healthy .github/workflows/test.yml

LabelLayerStatusPath
tests software healthy tests
fixtures software healthy tests/fixtures
rules software healthy rules
docs software healthy docs
.github software healthy .github
workflows software healthy .github/workflows

LabelLayerStatusPath
_field_matches software healthy tests/sigma_evaluator.py:16
_block_matches software healthy tests/sigma_evaluator.py:44
evaluate software healthy tests/sigma_evaluator.py:49
load_rule_fixture_pairs software healthy tests/test_rules.py:19
test_true_positives_fire software healthy tests/test_rules.py:42
test_true_negatives_do_not_fire software healthy tests/test_rules.py:56

LabelLayerStatusPath
repobility-clone-zmegnd5i software healthy /tmp/repobility-clone-zmegnd5i

LabelLayerStatusPath
gha::test cicd healthy .github/workflows/test.yml

LabelLayerStatusPath
test cicd healthy .github/workflows/test.yml
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/6128ad9e-bf17-439e-850c-a75788a5f742/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/6128ad9e-bf17-439e-850c-a75788a5f742/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.