Your recent sigma false-positive fixes

Hey @swachchhanda000, your recent Sigma work on false-positive filters for CMSTP and shell-open-key manipulation stood out.

We're testing a complementary detection layer for files that look normal but may carry hidden payloads, with the same concern you’ve been working on: whether the signal is precise enough to help rather than add noise.

This is still at a very early stage so I’m not assuming it belongs in a Nextron workflow without a hard technical read. Would like to get converse some more and hear what you have to say.

https://www.linkedin.com/in/francogarcia2025/ https://www.reddit.com/user/Techbro_TX/