v0.1.0

Changelog

• 1cd0f17 Initial commit: ordeal, adversarial test harness for Sigma rules
• fa9d614 build: make Homebrew cask upload optional; align install docs
• c229106 build: migrate goreleaser brews to homebrew_casks
• 48202b2 ci: run test job under bash on all platforms
• 4cc9cd4 ci: test on linux, macos, and windows; add govulncheck
• 29e237c docs(coverage): record windash and null support; add null example
• 626874d docs(mutators): full 41-mutator catalog with platforms and the -c-payload rule
• d4bfc71 docs(mutators): full catalog reference for all 28 evasions
• d2acb0a feat(cli): lint and list commands, mutate --only/--skip
• 7b1a7f1 feat(dataset): load telemetry from JSON, JSONL, EVTX-rendered, and winlog
• ecf449c feat(engine): base64offset, wide, re sub-flags, and expand modifiers
• 60b49d0 feat(engine): support |windash and Field: null without forking sigma-go
• 3d53f63 feat(examples): LOLBin rule corpus with suites
• 56bec69 feat(examples): Linux and macOS example rules
• ab21418 feat(lint): audit a rules tree for test hygiene
• fb6be5c feat(mutate): Linux/macOS shell-obfuscation mutators
• 35ea238 feat(mutate): PowerShell command-resolution evasions
• c0eb8cd feat(mutate): PowerShell string-obfuscation evasions
• db8d655 feat(mutate): Windows path canonicalization evasions
• 6243f13 feat(mutate): cmd.exe token and env-var evasions
• d5ff7c6 feat(mutate): extend windash to the full alternative-dash set
• 0150299 feat(mutate): field-aware catalog with ATT&CK metadata and payload safety
• cb6f83d feat(mutate): macOS-specific mutators
• 2844499 feat(mutate): network URL and IPv4 evasions
• 85ed4d1 feat(mutate): platform-gate mutators by rule logsource product
• bbad65b feat(mutate): score and report per technique, not per variant
• a85f285 feat(runner): dataset assertions and selectable mutators
• a20ae3e feat(suite): dataset cases, stricter validation, and tests
• 1d9d2da fix(engine): normalize modifier ordering so canonical windash rules evaluate
• 6045b0e fix(report): clarify the no-evasions note for platform-gated cases
• 8b2f88e refactor(mutate): self-registering catalog and per-mutator remediation
• 16d9103 test(cli): end-to-end golden scripts for the command tree