In 2025-11, two high-impact contributions across detection-rules and beats teams: elastic/detection-rules delivered a MITRE ATT&CK Proxy sub-technique addition and technique re-ordering, with data corrections for the updated_date and proper placement. This work addresses Issue #5279 and improves detection fidelity and data integrity. elastic/beats added a new process.args_count field to the Winlogbeat Windows security ingestion pipeline to quantify the number of process arguments, enabling deeper process behavior visibility and more effective anomaly detection. Collectively, these efforts expand threat coverage, enrich telemetry, and align MITRE taxonomy and Windows security data models across repositories. The work demonstrates strong data modeling, pipeline engineering, and cross-repo collaboration, supported by clear, co-authored contributions.