<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>T1095 on sentinelchangelog.net</title><link>http://sentinelchangelog.net/tags/t1095/</link><description>Recent content in T1095 on sentinelchangelog.net</description><generator>Hugo -- 0.157.0</generator><language>en</language><lastBuildDate>Tue, 26 May 2026 09:05:22 +0000</lastBuildDate><atom:link href="http://sentinelchangelog.net/tags/t1095/index.xml" rel="self" type="application/rss+xml"/><item><title>Defender for Endpoint: Cryptographic Identity Baselining Hunting Query for Process Network Anomalies</title><link>http://sentinelchangelog.net/posts/2026-05-26-pr-14333/</link><pubDate>Tue, 26 May 2026 09:05:22 +0000</pubDate><guid>http://sentinelchangelog.net/posts/2026-05-26-pr-14333/</guid><description>New hunting query detects first-time network connections by processes using cryptographic signer baselining to defeat DLL sideloading and BYOTA attacks.</description></item><item><title>Documentation Fix: Broken Links Resolved in Microsoft Entra ID and Network Session Essentials</title><link>http://sentinelchangelog.net/posts/2026-02-06-pr-13510/</link><pubDate>Fri, 06 Feb 2026 09:21:39 +0000</pubDate><guid>http://sentinelchangelog.net/posts/2026-02-06-pr-13510/</guid><description>Customer-reported broken links fixed in analytic rule descriptions with corrected MITRE technique references and restored documentation.</description></item></channel></rss>