# thrunt.me Sigma — changelog

> New / detection-logic / metadata / removed, newest first. Machine-readable churn is in `rules.lock.json`.

## 2026-07-04

### New
- add `t1037-linux-init-script-modification` (v1)
- add `t1098-004-ssh-authorized-keys-write` (v1)
- add `t1566-002-luxembourg-hospitality-sms-phish` (v1)