v1.17.0

What's Changed

• linux udevd: replace file-size based detection with YARA rules by @tstromberg in #380
• new detection: recently downloaded files which have been packed by @tstromberg in #381
• active systemd units: populate more in-the-wild examples by @tstromberg in #382
• new detection: suspicious systemd units by @tstromberg in #383

.. and loads of false positive-reduction PR's.

New Contributors

• @egibs made their first contribution in #372

Full Changelog: v1.16.0...v1.17.0