From f384771f33214330c751e3f36e09344e2086abb7 Mon Sep 17 00:00:00 2001
From: Copilot <198982749+Copilot@users.noreply.github.com>
Date: Thu, 19 Feb 2026 06:19:17 +0800
Subject: [PATCH 1/3] Add `msn.com` to Microsoft domain allow-list in detection
 rules

---
 rules/detection-rules.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/detection-rules.json b/rules/detection-rules.json
index a8bdeac..13a4056 100644
--- a/rules/detection-rules.json
+++ b/rules/detection-rules.json
@@ -33,6 +33,7 @@
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*microsoftazuread-sso\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*azureedge\\.net$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*bing\\.com$",
+    "^https:\\/\\/([a-zA-Z0-9-]+\\.)*msn\\.com$",
     "^https:\\/\\/github\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*cloud\\.microsoft$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*powerbi\\.com$"

From be0369a1525f463de8ec83fd02c7e8edbf2b9d29 Mon Sep 17 00:00:00 2001
From: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Date: Mon, 16 Mar 2026 23:27:47 +0800
Subject: [PATCH 2/3] Update detection-rules.json

Signed-off-by: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
---
 rules/detection-rules.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/detection-rules.json b/rules/detection-rules.json
index 13a4056..dc99de0 100644
--- a/rules/detection-rules.json
+++ b/rules/detection-rules.json
@@ -34,6 +34,7 @@
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*azureedge\\.net$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*bing\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*msn\\.com$",
+    "^https:\\/\\/([a-zA-Z0-9-]+\\.)*xbox\\.com$",
     "^https:\\/\\/github\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*cloud\\.microsoft$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*powerbi\\.com$"

From f5ea671f95cee093463ef7d546649ebe86055879 Mon Sep 17 00:00:00 2001
From: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Date: Tue, 24 Mar 2026 07:57:13 +0800
Subject: [PATCH 3/3] Update detection-rules.json

---
 rules/detection-rules.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/detection-rules.json b/rules/detection-rules.json
index dc99de0..de315a9 100644
--- a/rules/detection-rules.json
+++ b/rules/detection-rules.json
@@ -35,6 +35,7 @@
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*bing\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*msn\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*xbox\\.com$",
+    "^https:\\/\\/([a-zA-Z0-9-]+\\.)*mcas\\.ms$",
     "^https:\\/\\/github\\.com$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*cloud\\.microsoft$",
     "^https:\\/\\/([a-zA-Z0-9-]+\\.)*powerbi\\.com$"