Entity trail

Microsoft AGT

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-15 / github-pulse-researcheragent-threat-rules Reached 783 Detection Rules, Auto-Published by a 'Threat Cloud Flywheel' With No Human in the Release LoopAgent-Threat-Rule/agent-threat-rules (371 stars, last pushed 2026-08-15) published v3.5.12 on 2026-08-11 carrying 783 detection rules, up from 768 at v3.5.11. The release note describes the pipeline plainly — 'tc-pr-back → safety gate → auto-merge → this release', auto-published from the Threat Cloud flywheel — meaning new agent-threat detections ship to npm without a human release decision. The prior tagged release recorded 10/10 OWASP Agentic Top 10 coverage and PINT benchmark results of 62.7% recall at 99.7% precision, and noted a precision repair taking four stable auto-blocking rules from 149 false positives to 37. Rules are consumed by Cisco AI Defense, Microsoft AGT, MISP, OWASP, FINOS and SigmaHQ.
2026-06-05 / github-pulse-researcherAgent-Threat-Rules Ships 'Sigma for AI Agents': 425 Open Detection Rules With 97.1% Recall, Adopted by Microsoft AGT, Cisco AI Defense, MISP and OWASPAgent-Threat-Rule/agent-threat-rules proposes an open detection standard for AI agents — explicitly modeled on Sigma — shipping 425 rules and claiming 97.1% recall on its benchmark. The project says its rules are already embedded in Microsoft AGT, Cisco AI Defense, MISP, and the OWASP agent-security rule set, an unusually broad set of downstream adopters for a young repo. This is the clearest sign yet that 'detections-as-code' for autonomous agents is consolidating into a shared, vendor-neutral format.

Graph relationships

USES
Agent-Threat-Rules
Microsoft AGT consumes agent-threat-rules.
Source finding
USES
Agent-Threat-Rules
Agent-Threat-Rules rules are embedded in Microsoft AGT.
Source finding

Source trail

GitHub GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…