README.md
pyproject.toml
overruled/__init__.py
overruled/auditor.py
overruled/cases.py
overruled/cli.py
overruled/metamorphic.py
overruled/models.py
overruled/report.py
overruled/stats.py
overruled/subject.py
overruled.egg-info/PKG-INFO
overruled.egg-info/SOURCES.txt
overruled.egg-info/dependency_links.txt
overruled.egg-info/entry_points.txt
overruled.egg-info/requires.txt
overruled.egg-info/top_level.txt
overruled/cases/av_disabled.yaml
overruled/cases/benign_rotation.yaml
overruled/cases/brute_force.yaml
overruled/cases/c2_beacon.yaml
overruled/cases/case-ci-token-cloud.yaml
overruled/cases/case-cron-persist.yaml
overruled/cases/case-esc-browser-inject.yaml
overruled/cases/case-esc-dba-pii.yaml
overruled/cases/case-esc-exit-delete.yaml
overruled/cases/case-fp-av-storm.yaml
overruled/cases/case-fp-backup.yaml
overruled/cases/case-fp-cert-window.yaml
overruled/cases/case-fp-dbexport.yaml
overruled/cases/case-fp-dlp-migration.yaml
overruled/cases/case-fp-logreplay.yaml
overruled/cases/case-fp-qa-loadtest.yaml
overruled/cases/case-fp-software-deploy.yaml
overruled/cases/case-fp-spray-sim.yaml
overruled/cases/case-fp-timesync.yaml
overruled/cases/case-fp-wireshark.yaml
overruled/cases/case-iam-key-sprout.yaml
overruled/cases/case-lsass-dump.yaml
overruled/cases/case-pth-lateral.yaml
overruled/cases/case-ssh-bastion-bf.yaml
overruled/cases/data_exfil.yaml
overruled/cases/dns_tunneling.yaml
overruled/cases/esc_exec_mailbox.yaml
overruled/cases/esc_insider.yaml
overruled/cases/esc_partial_compromise.yaml
overruled/cases/esc_vendor_breach.yaml
overruled/cases/fp_backup_access.yaml
overruled/cases/fp_bulk_email.yaml
overruled/cases/fp_dev_portscan.yaml
overruled/cases/fp_hr_download.yaml
overruled/cases/fp_new_domain.yaml
overruled/cases/fp_pentest_window.yaml
overruled/cases/fp_sccm_task.yaml
overruled/cases/fp_travel.yaml
overruled/cases/fp_vuln_scan.yaml
overruled/cases/impossible_travel.yaml
overruled/cases/kerberoasting.yaml
overruled/cases/lateral_movement.yaml
overruled/cases/mfa_fatigue.yaml
overruled/cases/oauth_abuse.yaml
overruled/cases/phishing_url.yaml
overruled/cases/powershell_cradle.yaml
overruled/cases/privilege_escalation.yaml
overruled/cases/ransomware_staging.yaml
overruled/cases/sql_injection.yaml
overruled/cases/webshell.yaml
overruled/checks/__init__.py
overruled/checks/consistency.py
overruled/checks/evidence.py
overruled/checks/metamorphic.py
overruled/checks/parroting.py
overruled/checks/verdict.py
overruled/mocks/__init__.py
overruled/mocks/__main__.py
tests/test_checks.py
tests/test_decision_stats.py
tests/test_differential.py
tests/test_report_formats.py
tests/test_stats_metamorphic.py
tests/test_stats_properties.py