Commits

Commit history

1. Commits on Jun 9, 2026

   • Salt TTP (#4114)

     Show description for 725b0c3
     nasbench

     authored
     725b0c3View commit details

     Copy full SHA for 725b0c3

     View code at this pointBrowse repository at this point

   • Cisco Secure Access - Add New DNS and Proxy Detections (#4066)

     Show description for b960f93
     

     patel-bhavin

     and

     nasbench

     authored
     b960f93View commit details

     Copy full SHA for b960f93

     View code at this pointBrowse repository at this point
2. Commits on Jun 8, 2026

   • Fix regsvr32 typo (#4117)

     Show description for 1610a7c
     srkyn

     authored
     1610a7cView commit details

     Copy full SHA for 1610a7c

     View code at this pointBrowse repository at this point

   • Bump contentctl.yml and build.yml to 6.1.0 (#4113)

     Show description for 0c3e588
     

     patel-bhavin

     and

     research bot

     authored
     0c3e588View commit details

     Copy full SHA for 0c3e588

     View code at this pointBrowse repository at this point
3. Commits on May 20, 2026

   • yamlfmt

     ljstella

     committed
     0c869bfView commit details

     Copy full SHA for 0c869bf

     View code at this pointBrowse repository at this point
4. Commits on May 19, 2026

   • Reordering key

     ljstella

     committed
     d7b8c0fView commit details

     Copy full SHA for d7b8c0f

     View code at this pointBrowse repository at this point

   • Update detections/web/monitor_web_traffic_for_brand_abuse.yml

     Show description for d235c3e
     

     ljstella

     and

     nasbench

     authored
     d235c3eView commit details

     Copy full SHA for d235c3e

     View code at this pointBrowse repository at this point

   • Reordering keys

     ljstella

     committed
     bc18194View commit details

     Copy full SHA for bc18194

     View code at this pointBrowse repository at this point

   • Baseline cleanup

     ljstella

     committed
     b196ddcView commit details

     Copy full SHA for b196ddc

     View code at this pointBrowse repository at this point

   • message cleanup

     ljstella

     committed
     53565feView commit details

     Copy full SHA for 53565fe

     View code at this pointBrowse repository at this point

   • Multiple user type entities

     ljstella

     committed
     15c349bView commit details

     Copy full SHA for 15c349b

     View code at this pointBrowse repository at this point

   • Unbalanced $ in message

     ljstella

     committed
     e52095cView commit details

     Copy full SHA for e52095c

     View code at this pointBrowse repository at this point

   • Multiple non-user but no user

     ljstella

     committed
     baf4b85View commit details

     Copy full SHA for baf4b85

     View code at this pointBrowse repository at this point

   • Manual Review of correlation searches

     ljstella

     committed
     9dfb170View commit details

     Copy full SHA for 9dfb170

     View code at this pointBrowse repository at this point
5. Commits on May 13, 2026

   • Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creat…

     Show description for db8c7c8
     pyth0n1c

     committed
     db8c7c8View commit details

     Copy full SHA for db8c7c8

     View code at this pointBrowse repository at this point
6. Commits on May 5, 2026

   • Update Analytics to Support ATT&CK v19 (#4036)

     Show description for 9c183fa
     

     3 peopleauthored
     9c183faView commit details

     Copy full SHA for 9c183fa

     View code at this pointBrowse repository at this point

   • Add Big Batch of Snap Attack Converted Rules (#4015)

     Show description for 917fe77
     

     3 peopleauthored
     917fe77View commit details

     Copy full SHA for 917fe77

     View code at this pointBrowse repository at this point

   • Add Analytic for Copy Fail (#4063)

     Show description for 4d4c7ee
     

     RavenTait

     and

     nasbench

     authored
     4d4c7eeView commit details

     Copy full SHA for 4d4c7ee

     View code at this pointBrowse repository at this point
7. Commits on May 4, 2026

   • Improved detections based on telemetry data (#4011)

     Show description for a9aaf49
     

     4 peopleauthored
     a9aaf49View commit details

     Copy full SHA for a9aaf49

     View code at this pointBrowse repository at this point
8. Commits on Apr 29, 2026

   • Add Secure Access Firewall Detections (#3986)

     Show description for becdb58
     

     3 peopleauthored
     becdb58View commit details

     Copy full SHA for becdb58

     View code at this pointBrowse repository at this point

   • Fixed two detections, and improved macos keychain dumping for more coverage of the technique (#4034)

     Show description for c5e9d4a
     

     jwindley

     and

     nasbench

     authored
     c5e9d4aView commit details

     Copy full SHA for c5e9d4a

     View code at this pointBrowse repository at this point

   • vip_keylogger (#4024)

     Show description for 9972c09
     

     4 peopleauthored
     9972c09View commit details

     Copy full SHA for 9972c09

     View code at this pointBrowse repository at this point
9. Commits on Apr 17, 2026

   • updating risk drilldowns (#4016)

     Show description for ba59855
     patel-bhavin

     authored
     ba59855View commit details

     Copy full SHA for ba59855

     View code at this pointBrowse repository at this point
10. Commits on Apr 16, 2026

    • Fix Issues - 2nd Round (#3996)

      Show description for ea5bd52
      

      nasbench

      and

      patel-bhavin

      authored
      ea5bd52View commit details

      Copy full SHA for ea5bd52

      View code at this pointBrowse repository at this point

    • Remove missing fields in Windows Event Log Cleared detection (#4001)

      Show description for c624166
      

      4 peopleauthored
      c624166View commit details

      Copy full SHA for c624166

      View code at this pointBrowse repository at this point
11. Commits on Apr 15, 2026

    • Merge branch 'develop' into 5.25.1_changes_for_develop

      pyth0n1c

      authored
      3c16b13View commit details

      Copy full SHA for 3c16b13

      View code at this pointBrowse repository at this point

    • Fix version and date and update contentctl version in prep for release.

      pyth0n1c

      committed
      6a8bfe9View commit details

      Copy full SHA for 6a8bfe9

      View code at this pointBrowse repository at this point

    • New MacOS detections T1016 (#4017)

      Show description for 80b29d6
      

      3 peopleauthored
      80b29d6View commit details

      Copy full SHA for 80b29d6

      View code at this pointBrowse repository at this point

    • Duplicate - Microsoft Intune Bulk Wipe Detected (#4014)

      Show description for c90d744
      

      patel-bhavin

      and

      nasbench

      authored
      c90d744View commit details

      Copy full SHA for c90d744

      View code at this pointBrowse repository at this point
12. Commits on Apr 14, 2026

    • Snap Mac Detections (#3935)

      Show description for 8050483
      

      RavenTait

      and

      nasbench

      authored
      8050483View commit details

      Copy full SHA for 8050483

      View code at this pointBrowse repository at this point
13. Commits on Apr 13, 2026

    • Spelling Fixes (#4002)

      Show description for 8d25102
      

      ljstella

      and

      nasbench

      authored
      8d25102View commit details

      Copy full SHA for 8d25102

      View code at this pointBrowse repository at this point
14. Commits on Apr 2, 2026

    • Tagged Analytics Covering the Axios Compromise Post-Exploitation Activity (#3982)

      Show description for 7293d75
      

      tccontre

      and

      nasbench

      authored
      7293d75View commit details

      Copy full SHA for 7293d75

      View code at this pointBrowse repository at this point

    • Add Filter for VMware Tools (#3983)

      RavenTait

      authored
      f416da5View commit details

      Copy full SHA for f416da5

      View code at this pointBrowse repository at this point

    • Bump contentctl.yml to 5.26.0 (#3989)

      Show description for 8c6453e
      

      3 peopleauthored
      8c6453eView commit details

      Copy full SHA for 8c6453e

      View code at this pointBrowse repository at this point
15. Commits on Mar 31, 2026

    • Fix Broken RBA Message (#3984)

      nasbench

      authored
      fd53a21View commit details

      Copy full SHA for fd53a21

      View code at this pointBrowse repository at this point