Commits

Commit history

1. Commits on May 5, 2026

   • Update Analytics to Support ATT&CK v19 (#4036)

     Show description for 9c183fa
     

     3 peopleauthored
     9c183faView commit details

     Copy full SHA for 9c183fa

     View code at this pointBrowse repository at this point

   • Add Big Batch of Snap Attack Converted Rules (#4015)

     Show description for 917fe77
     

     3 peopleauthored
     917fe77View commit details

     Copy full SHA for 917fe77

     View code at this pointBrowse repository at this point

   • Add Analytic for Copy Fail (#4063)

     Show description for 4d4c7ee
     

     RavenTait

     and

     nasbench

     authored
     4d4c7eeView commit details

     Copy full SHA for 4d4c7ee

     View code at this pointBrowse repository at this point
2. Commits on May 4, 2026

   • Improved detections based on telemetry data (#4011)

     Show description for a9aaf49
     

     4 peopleauthored
     a9aaf49View commit details

     Copy full SHA for a9aaf49

     View code at this pointBrowse repository at this point
3. Commits on Apr 29, 2026

   • Add Secure Access Firewall Detections (#3986)

     Show description for becdb58
     

     3 peopleauthored
     becdb58View commit details

     Copy full SHA for becdb58

     View code at this pointBrowse repository at this point

   • Fixed two detections, and improved macos keychain dumping for more coverage of the technique (#4034)

     Show description for c5e9d4a
     

     jwindley

     and

     nasbench

     authored
     c5e9d4aView commit details

     Copy full SHA for c5e9d4a

     View code at this pointBrowse repository at this point

   • vip_keylogger (#4024)

     Show description for 9972c09
     

     4 peopleauthored
     9972c09View commit details

     Copy full SHA for 9972c09

     View code at this pointBrowse repository at this point
4. Commits on Apr 17, 2026

   • updating risk drilldowns (#4016)

     Show description for ba59855
     patel-bhavin

     authored
     ba59855View commit details

     Copy full SHA for ba59855

     View code at this pointBrowse repository at this point
5. Commits on Apr 16, 2026

   • Fix Issues - 2nd Round (#3996)

     Show description for ea5bd52
     

     nasbench

     and

     patel-bhavin

     authored
     ea5bd52View commit details

     Copy full SHA for ea5bd52

     View code at this pointBrowse repository at this point

   • Remove missing fields in Windows Event Log Cleared detection (#4001)

     Show description for c624166
     

     4 peopleauthored
     c624166View commit details

     Copy full SHA for c624166

     View code at this pointBrowse repository at this point
6. Commits on Apr 15, 2026

   • Merge branch 'develop' into 5.25.1_changes_for_develop

     pyth0n1c

     authored
     3c16b13View commit details

     Copy full SHA for 3c16b13

     View code at this pointBrowse repository at this point

   • Fix version and date and update contentctl version in prep for release.

     pyth0n1c

     committed
     6a8bfe9View commit details

     Copy full SHA for 6a8bfe9

     View code at this pointBrowse repository at this point

   • New MacOS detections T1016 (#4017)

     Show description for 80b29d6
     

     3 peopleauthored
     80b29d6View commit details

     Copy full SHA for 80b29d6

     View code at this pointBrowse repository at this point

   • Duplicate - Microsoft Intune Bulk Wipe Detected (#4014)

     Show description for c90d744
     

     patel-bhavin

     and

     nasbench

     authored
     c90d744View commit details

     Copy full SHA for c90d744

     View code at this pointBrowse repository at this point
7. Commits on Apr 14, 2026

   • Snap Mac Detections (#3935)

     Show description for 8050483
     

     RavenTait

     and

     nasbench

     authored
     8050483View commit details

     Copy full SHA for 8050483

     View code at this pointBrowse repository at this point
8. Commits on Apr 13, 2026

   • Spelling Fixes (#4002)

     Show description for 8d25102
     

     ljstella

     and

     nasbench

     authored
     8d25102View commit details

     Copy full SHA for 8d25102

     View code at this pointBrowse repository at this point
9. Commits on Apr 2, 2026

   • Tagged Analytics Covering the Axios Compromise Post-Exploitation Activity (#3982)

     Show description for 7293d75
     

     tccontre

     and

     nasbench

     authored
     7293d75View commit details

     Copy full SHA for 7293d75

     View code at this pointBrowse repository at this point

   • Add Filter for VMware Tools (#3983)

     RavenTait

     authored
     f416da5View commit details

     Copy full SHA for f416da5

     View code at this pointBrowse repository at this point

   • Bump contentctl.yml to 5.26.0 (#3989)

     Show description for 8c6453e
     

     3 peopleauthored
     8c6453eView commit details

     Copy full SHA for 8c6453e

     View code at this pointBrowse repository at this point
10. Commits on Mar 31, 2026

    • Fix Broken RBA Message (#3984)

      nasbench

      authored
      fd53a21View commit details

      Copy full SHA for fd53a21

      View code at this pointBrowse repository at this point
11. Commits on Mar 30, 2026

    • First pass of RBA message fix

      ljstella

      committed
      d38d8e1View commit details

      Copy full SHA for d38d8e1

      View code at this pointBrowse repository at this point

    • gh0st (#3973)

      Show description for ff78e2d
      

      3 peopleauthored
      ff78e2dView commit details

      Copy full SHA for ff78e2d

      View code at this pointBrowse repository at this point

    • Fix Reported Issues - April Batch (#3962)

      Show description for bc1b413
      

      nasbench

      and

      patel-bhavin

      authored
      bc1b413View commit details

      Copy full SHA for bc1b413

      View code at this pointBrowse repository at this point
12. Commits on Mar 28, 2026

    • Update Suricata TA and Related Analytics (#3974)

      Show description for b87507b
      

      nasbench

      and

      ljstella

      authored
      b87507bView commit details

      Copy full SHA for b87507b

      View code at this pointBrowse repository at this point
13. Commits on Mar 27, 2026

    • Tune detections based on Athena FPs (#3972)

      Show description for 89391cf
      

      3 peopleauthored
      89391cfView commit details

      Copy full SHA for 89391cf

      View code at this pointBrowse repository at this point

    • Update ryuk_wake_on_lan_command.yml

      nasbench

      committed
      30e0c54View commit details

      Copy full SHA for 30e0c54

      View code at this pointBrowse repository at this point

    • bug fix

      

      P4T12ICK

      committed
      44f3125View commit details

      Copy full SHA for 44f3125

      View code at this pointBrowse repository at this point

    • bug fix

      

      P4T12ICK

      committed
      0b219a6View commit details

      Copy full SHA for 0b219a6

      View code at this pointBrowse repository at this point

    • changed back to Anomaly

      

      P4T12ICK

      committed
      8be3693View commit details

      Copy full SHA for 8be3693

      View code at this pointBrowse repository at this point

    • updated suggestions

      

      P4T12ICK

      committed
      c40b390View commit details

      Copy full SHA for c40b390

      View code at this pointBrowse repository at this point
14. Commits on Mar 26, 2026

    • Update detections/endpoint/windows_account_access_removal_via_logoff_exec.yml

      Show description for b4c002e
      

      P4T12ICK

      and

      nasbench

      authored
      b4c002eView commit details

      Copy full SHA for b4c002e

      View code at this pointBrowse repository at this point

    • Update detections/endpoint/windows_application_whitelisting_bypass_attempt_via_rundll32.yml

      Show description for 3c1d41e
      

      P4T12ICK

      and

      nasbench

      authored
      3c1d41eView commit details

      Copy full SHA for 3c1d41e

      View code at this pointBrowse repository at this point

    • Update detections/endpoint/system_user_discovery_with_whoami.yml

      Show description for 4912e09
      

      P4T12ICK

      and

      nasbench

      authored
      4912e09View commit details

      Copy full SHA for 4912e09

      View code at this pointBrowse repository at this point

    • Update detections/endpoint/conti_common_exec_parameter.yml

      Show description for b4c800d
      

      P4T12ICK

      and

      nasbench

      authored
      b4c800dView commit details

      Copy full SHA for b4c800d

      View code at this pointBrowse repository at this point

    • Update detections/endpoint/anomalous_usage_of_7zip.yml

      Show description for 6d5d970
      

      P4T12ICK

      and

      nasbench

      authored
      6d5d970View commit details

      Copy full SHA for 6d5d970

      View code at this pointBrowse repository at this point