diff --git a/CHANGELOG.md b/CHANGELOG.md
index e1381441..ec905897 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,7 +9,7 @@
 
 - Remove redundant `os_` parameter from `capa.loader.collect_metadata()`. External scripts calling this function must be updated to remove this argument. OS metadata now relies solely on the extractor yielding it via `extract_global_features()`. @mike-hunhoff #3076
 
-### New Rules (10)
+### New Rules (11)
 
 - nursery/decrypt-payload-stored-as-ipv6-strings corkami@google.com
 - nursery/connect-to-websocket-server-in-dotnet mehunhoff@google.com
@@ -21,6 +21,7 @@
 - nursery/decode-pe-stored-as-uuid corkami@google.com
 - compiler/crystal/compiled-with-crystal corkami@google.com
 - compiler/odin/compiled-with-odin corkami@google.com
+- load-code/dotnet/load-dotnet-assembly-via-runtimeassemblynloadimage still@teamt5.org
 -
 
 ### Bug Fixes
diff --git a/rules b/rules
index 48c6cd1b..67f626ee 160000
--- a/rules
+++ b/rules
@@ -1 +1 @@
-Subproject commit 48c6cd1b111c44808e2bbac69b2012c7991ae394
+Subproject commit 67f626eecb123e74c3e0cb464f3feaf8c0345cb2