chore(definitions): sync detection content from v11

[JocLRojas]

A detailed explanation.

Brings four batches of detection content already merged in v11 into the v12 line, keeping both branches aligned:

• feat(filters): update bitdefender_gz, azure-eventhub and windows-events filters #2430 — feat(filters): update bitdefender_gz filter
• feat(rules/bitdefender_gz): update detection rules and add phishing_access_blocked #2432 — feat(rules/bitdefender_gz): update detection rules and add phishing_access_blocked
• feat(rules/windows): update adfs, certificate services, sid history and smbv1 rules #2431 — feat(rules/windows): update adfs, certificate services, sid history and smbv1 rules
• refactor(sonicwall): revamp filter and correlation rules #2443 — refactor(sonicwall): revamp filter and correlation rules

Files affected: definitions/filters/antivirus/bitdefender_gz.yaml, definitions/filters/sonicwall/sonic_wall.yaml, and rules under definitions/rules/antivirus/bitdefender_gz/, definitions/rules/windows/, and definitions/rules/sonicwall/sonicwall_firewall/.

Three obsolete sonicwall rules (capture_client_threats, encrypted_threats_detection, zero_day_threat_detection) are removed as part of the sonicwall revamp, matching v11.

The reasoning behind these changes.

Keep detection content parity between v11 (already in production) and v12 (upcoming release). No new detections invented for v12 in this PR — all four batches were previously reviewed and merged in v11.

A reference to the issue that this pull request addresses.

N/A

[github-actions]

✅ AI review — Clean

No issues detected in this diff.

✅ architecture (gemini-3-flash-lite) — clean

Summary: No reviewable changes in this diff (excluded paths only).

No findings.

✅ bugs (gemini-3-flash-lite) — clean

Summary: No reviewable changes in this diff (excluded paths only).

No findings.

✅ security (gemini-3-flash-lite) — clean

Summary: No reviewable changes in this diff (excluded paths only).

No findings.

🔴 go-deps — pending updates

🔍 Discovered 30 Go projects

📦 Dependencies with updates available:

  📁 ./plugins/events:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/rule-flood-guard:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/stats:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/feeds:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/alerts:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/aws:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./backend:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

❌ Please update dependencies before merging.