---
name: New Detection Rule
about: Propose a new security detection rule
title: '[RULE] '
labels: new-rule
assignees: ''
---

## Rule Proposal

### Rule Name

A descriptive name for the rule.

### Category

- [ ] Injection
- [ ] Exfiltration
- [ ] Persistence
- [ ] Privilege Escalation
- [ ] Permission Abuse
- [ ] Obfuscation
- [ ] Other: ___________

### Severity

- [ ] Critical
- [ ] High
- [ ] Medium
- [ ] Low

## Description

What malicious pattern does this rule detect?

## Example Malicious Code

```yaml
# Example of code this rule should catch
```

## Detection Logic

Describe how the rule should detect this pattern:

- Keywords to match:
- Patterns to look for:
- Context considerations:

## False Positive Considerations

What legitimate uses might trigger this rule? How can we minimize false positives?

## References

Links to relevant security research, CVEs, or real-world examples:

-
-

## Additional Context

Add any other context here.
