Commits

Commit history

1. Commits on Jul 6, 2026

   • Add Dirty Frag (CVE-2026-43284/43500) Linux kernel LPE detection (#4122)

     Show description for b924b36
     

     Axselll

     and

     nasbench

     authored
     b924b36View commit details

     Copy full SHA for b924b36

     View code at this pointBrowse repository at this point

   • Add PreAuthType filter to PetitPotam Kerberos TGT detection (#4146)

     Show description for fa6d7a4
     

     munzzyy

     and

     nasbench

     authored
     fa6d7a4View commit details

     Copy full SHA for fa6d7a4

     View code at this pointBrowse repository at this point

   • Remote Thread Analytics Update (#4145)

     nasbench

     authored
     1e6583fView commit details

     Copy full SHA for 1e6583f

     View code at this pointBrowse repository at this point
2. Commits on Jul 1, 2026

   • Add New Analytics Related to Phantom Stealer (#4137)

     Show description for 6ef92e5
     

     3 peopleauthored
     6ef92e5View commit details

     Copy full SHA for 6ef92e5

     View code at this pointBrowse repository at this point

   • update IF config (#4142)

     Show description for bf13c80
     

     nasbench

     and

     patel-bhavin

     authored
     bf13c80View commit details

     Copy full SHA for bf13c80

     View code at this pointBrowse repository at this point

   • chore: swap order of macros (#4144)

     Show description for d4026db
     

     3 peopleauthored
     d4026dbView commit details

     Copy full SHA for d4026db

     View code at this pointBrowse repository at this point
3. Commits on Jun 25, 2026

   • Update Windows EDRSilencer renamed binary detection coverage (#4123)

     Show description for 22c4660
     

     raylee-hawkins

     and

     nasbench

     authored
     22c4660View commit details

     Copy full SHA for 22c4660

     View code at this pointBrowse repository at this point
4. Commits on Jun 24, 2026

   • Splunk Vuln content to Github (#4134)

     Show description for 3afca81
     

     patel-bhavin

     and

     nasbench

     authored
     3afca81View commit details

     Copy full SHA for 3afca81

     View code at this pointBrowse repository at this point
5. Commits on Jun 16, 2026

   • udpating risk_message (#4129)

     patel-bhavin

     authored
     4155c6cView commit details

     Copy full SHA for 4155c6c

     View code at this pointBrowse repository at this point

   • rogue_planet (#4121)

     Show description for 46e3f85
     

     4 peopleauthored
     46e3f85View commit details

     Copy full SHA for 46e3f85

     View code at this pointBrowse repository at this point

   • detection_fixes_2 (#4107)

     Show description for f443d99
     

     5 peopleauthored
     f443d99View commit details

     Copy full SHA for f443d99

     View code at this pointBrowse repository at this point

   • new_salat_stealer (#4118)

     Show description for fe5b181
     

     4 peopleauthored
     fe5b181View commit details

     Copy full SHA for fe5b181

     View code at this pointBrowse repository at this point

   • Fix broken regex alternation in detections (#4116)

     Show description for efd02f4
     

     3 peopleauthored
     efd02f4View commit details

     Copy full SHA for efd02f4

     View code at this pointBrowse repository at this point

   • 2026-20127 (#4119)

     Show description for a1136e4
     

     4 peopleauthored
     a1136e4View commit details

     Copy full SHA for a1136e4

     View code at this pointBrowse repository at this point
6. Commits on Jun 15, 2026

   • Add New BlueHammer / RedSun Analytics (#4037)

     Show description for fad1a59
     

     3 peopleauthored
     fad1a59View commit details

     Copy full SHA for fad1a59

     View code at this pointBrowse repository at this point

   • PTC Windchill (#4124)

     Show description for e9400d9
     

     nasbench

     and

     patel-bhavin

     authored
     e9400d9View commit details

     Copy full SHA for e9400d9

     View code at this pointBrowse repository at this point

   • new o11y secure application detection (#4108)

     Show description for 7870ff5
     

     3 peopleauthored
     7870ff5View commit details

     Copy full SHA for 7870ff5

     View code at this pointBrowse repository at this point

   • Rewrote HTTP Scripting Tool User Agent to Web DM (#4125)

     Show description for 0e953aa
     

     3 peopleauthored
     0e953aaView commit details

     Copy full SHA for 0e953aa

     View code at this pointBrowse repository at this point
7. Commits on Jun 12, 2026

   • Copyfail and DIrtyFrag (#4081)

     Show description for 255bd3c
     

     3 peopleauthored
     255bd3cView commit details

     Copy full SHA for 255bd3c

     View code at this pointBrowse repository at this point
8. Commits on Jun 11, 2026

   • fix: compare AD self-add user fields case-insensitively (#4112)

     Show description for ca8e656
     

     srkyn

     and

     nasbench

     authored
     ca8e656View commit details

     Copy full SHA for ca8e656

     View code at this pointBrowse repository at this point
9. Commits on Jun 9, 2026

   • Salt TTP (#4114)

     Show description for 725b0c3
     nasbench

     authored
     725b0c3View commit details

     Copy full SHA for 725b0c3

     View code at this pointBrowse repository at this point

   • Cisco Secure Access - Add New DNS and Proxy Detections (#4066)

     Show description for b960f93
     

     patel-bhavin

     and

     nasbench

     authored
     b960f93View commit details

     Copy full SHA for b960f93

     View code at this pointBrowse repository at this point
10. Commits on Jun 8, 2026

    • Fix regsvr32 typo (#4117)

      Show description for 1610a7c
      srkyn

      authored
      1610a7cView commit details

      Copy full SHA for 1610a7c

      View code at this pointBrowse repository at this point

    • Bump contentctl.yml and build.yml to 6.1.0 (#4113)

      Show description for 0c3e588
      

      patel-bhavin

      and

      research bot

      authored
      0c3e588View commit details

      Copy full SHA for 0c3e588

      View code at this pointBrowse repository at this point
11. Commits on May 20, 2026

    • yamlfmt

      ljstella

      committed
      0c869bfView commit details

      Copy full SHA for 0c869bf

      View code at this pointBrowse repository at this point
12. Commits on May 19, 2026

    • Reordering key

      ljstella

      committed
      d7b8c0fView commit details

      Copy full SHA for d7b8c0f

      View code at this pointBrowse repository at this point

    • Update detections/web/monitor_web_traffic_for_brand_abuse.yml

      Show description for d235c3e
      

      ljstella

      and

      nasbench

      authored
      d235c3eView commit details

      Copy full SHA for d235c3e

      View code at this pointBrowse repository at this point

    • Reordering keys

      ljstella

      committed
      bc18194View commit details

      Copy full SHA for bc18194

      View code at this pointBrowse repository at this point

    • Baseline cleanup

      ljstella

      committed
      b196ddcView commit details

      Copy full SHA for b196ddc

      View code at this pointBrowse repository at this point

    • message cleanup

      ljstella

      committed
      53565feView commit details

      Copy full SHA for 53565fe

      View code at this pointBrowse repository at this point

    • Multiple user type entities

      ljstella

      committed
      15c349bView commit details

      Copy full SHA for 15c349b

      View code at this pointBrowse repository at this point

    • Unbalanced $ in message

      ljstella

      committed
      e52095cView commit details

      Copy full SHA for e52095c

      View code at this pointBrowse repository at this point

    • Multiple non-user but no user

      ljstella

      committed
      baf4b85View commit details

      Copy full SHA for baf4b85

      View code at this pointBrowse repository at this point

    • Manual Review of correlation searches

      ljstella

      committed
      9dfb170View commit details

      Copy full SHA for 9dfb170

      View code at this pointBrowse repository at this point
13. Commits on May 13, 2026

    • Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creat…

      Show description for db8c7c8
      pyth0n1c

      committed
      db8c7c8View commit details

      Copy full SHA for db8c7c8

      View code at this pointBrowse repository at this point