Commits

Commit history

1. Commits on Oct 2, 2026

   • Deprecate Child Processes of spoolsv.exe detection (#4310)

     Show description for 3db0f54
     

     rviskova13

     and

     nasbench

     authored
     3db0f54View commit details

     Copy full SHA for 3db0f54

     Browse repository at this point

   • Bump contentctl.yml and build.yml to 6.8.0 (#4311)

     Show description for f4866a0
     nasbench

     authored
     f4866a0View commit details

     Copy full SHA for f4866a0

     Browse repository at this point

   • Update data source TA and install.yml app versions (#4309)

     Show description for 1d0d226
     

     pyth0n1c

     and

     patel-bhavin

     authored
     1d0d226View commit details

     Copy full SHA for 1d0d226

     Browse repository at this point
2. Commits on Oct 1, 2026

   • Update GenericIncidentResponse_v4.json (#4308)

     Show description for dd57ea0
     kbouchardherjavecgroup

     authored
     dd57ea0View commit details

     Copy full SHA for dd57ea0

     Browse repository at this point

   • added V4 of Generic Response plan (#4295)

     Show description for cd8d8f8
     

     kbouchardherjavecgroup

     and

     nasbench

     authored
     cd8d8f8View commit details

     Copy full SHA for cd8d8f8

     Browse repository at this point

   • add script and workflow for archived TAs (#4301)

     nasbench

     authored
     c69f213View commit details

     Copy full SHA for c69f213

     Browse repository at this point

   • Merge pull request #4300 from splunk/shieldcrash_detections

     Show description for f7a5a90
     onurmerdogan

     authored
     f7a5a90View commit details

     Copy full SHA for f7a5a90

     Browse repository at this point

   • Merge branch 'develop' into shieldcrash_detections

     nasbench

     authored
     c2ab7d6View commit details

     Copy full SHA for c2ab7d6

     Browse repository at this point

   • Update data source TA and install.yml app versions (#4302)

     Show description for 896f8d9
     

     pyth0n1c

     and

     patel-bhavin

     authored
     896f8d9View commit details

     Copy full SHA for 896f8d9

     Browse repository at this point

   • Update windows_defender_intermediary_artifact_was_observed.yml

     nasbench

     committed
     466d5b3View commit details

     Copy full SHA for 466d5b3

     Browse repository at this point

   • Add New Rule Covering ResetNightmare (#4289)

     Show description for 964fd33
     

     RavenTait

     and

     nasbench

     authored
     964fd33View commit details

     Copy full SHA for 964fd33

     Browse repository at this point
3. Commits on Sep 30, 2026

   • New Detection Coverage for ShieldCrash Exploit

     onurmerdogan

     committed
     4a7da06View commit details

     Copy full SHA for 4a7da06

     Browse repository at this point
4. Commits on Sep 29, 2026

   • improve format for attack data links so (#4299)

     Show description for cc18903
     pyth0n1c

     authored
     cc18903View commit details

     Copy full SHA for cc18903

     Browse repository at this point

   • O365 message trace detections: support o365:graph:messagetrace (Office 365 add-on 6.x) (#4286)

     Show description for 9aff0d8
     

     sbaker-gre

     and

     nasbench

     authored
     9aff0d8View commit details

     Copy full SHA for 9aff0d8

     Browse repository at this point

   • Windows Crowdstrike RTR Script Execution: match EDR sources without a parent command line (#4294)

     Show description for 21bcc53
     

     sbaker-gre

     and

     nasbench

     authored
     21bcc53View commit details

     Copy full SHA for 21bcc53

     Browse repository at this point
5. Commits on Sep 24, 2026

   • Azure AD consent detections: repair Scope regex broken by a line wrap (#4291)

     Show description for 64acde7
     

     sbaker-gre

     and

     nasbench

     authored
     64acde7View commit details

     Copy full SHA for 64acde7

     Browse repository at this point
6. Commits on Sep 23, 2026

   • expected_results should be 1 on lolbas detection (#4280)

     Show description for 9640c03
     

     tjgeorgen

     and

     nasbench

     authored
     9640c03View commit details

     Copy full SHA for 9640c03

     Browse repository at this point

   • Update Goolge Cloud TA (#4284)

     pyth0n1c

     authored
     aea632aView commit details

     Copy full SHA for aea632a

     Browse repository at this point
7. Commits on Sep 21, 2026

   • Maybe This is It? (#4279)

     nasbench

     authored
     1a41f94View commit details

     Copy full SHA for 1a41f94

     Browse repository at this point

   • Fix Typo (#4278)

     nasbench

     authored
     424a788View commit details

     Copy full SHA for 424a788

     Browse repository at this point

   • Tune and Add More Context to Noisy Detections (#4263)

     nasbench

     authored
     1f178cbView commit details

     Copy full SHA for 1f178cb

     Browse repository at this point

   • Bump contentctl.yml and build.yml to 6.7.0 (#4277)

     Show description for a45339f
     nasbench

     authored
     a45339fView commit details

     Copy full SHA for a45339f

     Browse repository at this point

   • macOS detection: Osascript Executing JavaScript Code With Objective-C (#4272)

     Show description for 8fb5650
     

     3 peopleauthored
     8fb5650View commit details

     Copy full SHA for 8fb5650

     Browse repository at this point

   • macOS detection: Osascript Long Lived Connection To Remote Host (#4270)

     Show description for 840306f
     

     3 peopleauthored
     840306fView commit details

     Copy full SHA for 840306f

     Browse repository at this point

   • macOS detection: MacOS Osascript Executing Interactive Shell (#4271)

     Show description for 0389108
     

     3 peopleauthored
     0389108View commit details

     Copy full SHA for 0389108

     Browse repository at this point

   • Update EventID 10 Analytics (#4276)

     nasbench

     authored
     4ad4947View commit details

     Copy full SHA for 4ad4947

     Browse repository at this point

   • Add Some Missing Threat Objects & References (#4262)

     Show description for da1d611
     

     nasbench

     and

     onurmerdogan

     authored
     da1d611View commit details

     Copy full SHA for da1d611

     Browse repository at this point

   • Multiple Detections Against Recent ClickFix Campaigns (#4269)

     Show description for 790ce0a
     

     onurmerdogan

     and

     nasbench

     authored
     790ce0aView commit details

     Copy full SHA for 790ce0a

     Browse repository at this point
8. Commits on Sep 18, 2026

   • Deprecate macos reopened applications (#4273)

     Show description for 7b6385a
     

     RavenTait

     and

     nasbench

     authored
     7b6385aView commit details

     Copy full SHA for 7b6385a

     Browse repository at this point

   • Update data source TA and install.yml app versions (#4274)

     pyth0n1c

     authored
     2216f46View commit details

     Copy full SHA for 2216f46

     Browse repository at this point
9. Commits on Sep 8, 2026

   • Detection Against Content Copied From Browsers Executed through Run (#4261)

     onurmerdogan

     authored
     4cd62e8View commit details

     Copy full SHA for 4cd62e8

     Browse repository at this point
10. Commits on Sep 7, 2026

    • Batch fixes from code review (#4260)

      rviskova13

      authored
      5b9754bView commit details

      Copy full SHA for 5b9754b

      Browse repository at this point

    • Batch Fixes from Code Review (#4259)

      onurmerdogan

      authored
      855be18View commit details

      Copy full SHA for 855be18

      Browse repository at this point

    • Add Socat Utility Detections (#4253)

      Show description for 225e705
      

      3 peopleauthored
      225e705View commit details

      Copy full SHA for 225e705

      Browse repository at this point
11. Commits on Sep 6, 2026

    • macOS detection: MacOS Osascript Displaying Suspicious User Prompt (#4250)

      Show description for 4265636
      

      3 peopleauthored
      4265636View commit details

      Copy full SHA for 4265636

      Browse repository at this point