Commits

Commit history

1. Commits on May 5, 2026

   • Update Analytics to Support ATT&CK v19 (#4036)

     Show description for 9c183fa
     

     3 peopleauthored
     9c183faView commit details

     Copy full SHA for 9c183fa

     View code at this pointBrowse repository at this point
2. Commits on Apr 29, 2026

   • Fixed two detections, and improved macos keychain dumping for more coverage of the technique (#4034)

     Show description for c5e9d4a
     

     jwindley

     and

     nasbench

     authored
     c5e9d4aView commit details

     Copy full SHA for c5e9d4a

     View code at this pointBrowse repository at this point
3. Commits on Apr 17, 2026

   • updating risk drilldowns (#4016)

     Show description for ba59855
     patel-bhavin

     authored
     ba59855View commit details

     Copy full SHA for ba59855

     View code at this pointBrowse repository at this point
4. Commits on Apr 15, 2026

   • Duplicate - Microsoft Intune Bulk Wipe Detected (#4014)

     Show description for c90d744
     

     patel-bhavin

     and

     nasbench

     authored
     c90d744View commit details

     Copy full SHA for c90d744

     View code at this pointBrowse repository at this point
5. Commits on Mar 30, 2026

   • Fix Reported Issues - April Batch (#3962)

     Show description for bc1b413
     

     nasbench

     and

     patel-bhavin

     authored
     bc1b413View commit details

     Copy full SHA for bc1b413

     View code at this pointBrowse repository at this point
6. Commits on Mar 16, 2026

   • Deprecate MLTK detections (#3922)

     Show description for b3fed38
     

     3 peopleauthored
     b3fed38View commit details

     Copy full SHA for b3fed38

     View code at this pointBrowse repository at this point
7. Commits on Mar 13, 2026

   • Fix Broken Link, Versions and Pre-Commit (#3956)

     Show description for 29113be
     nasbench

     authored
     29113beView commit details

     Copy full SHA for 29113be

     View code at this pointBrowse repository at this point

   • fix: replace src with src_user (#3955)

     Show description for d1d4883
     

     AndreiBanaru

     and

     Andrei Banaru

     authored
     d1d4883View commit details

     Copy full SHA for d1d4883

     View code at this pointBrowse repository at this point

   • Adding dynamic information to static rba messages (#3951)

     Show description for a0059cf
     DipsyTipsy

     authored
     a0059cfView commit details

     Copy full SHA for a0059cf

     View code at this pointBrowse repository at this point
8. Commits on Mar 10, 2026

   • anomaly_standard_init_score (#3946)

     Show description for 3da4f79
     

     3 peopleauthored
     3da4f79View commit details

     Copy full SHA for 3da4f79

     View code at this pointBrowse repository at this point

   • ttp_standard_init_score (#3945)

     Show description for 2e2f6fc
     

     tccontre

     and

     t-contreras

     authored
     2e2f6fcView commit details

     Copy full SHA for 2e2f6fc

     View code at this pointBrowse repository at this point
9. Commits on Feb 25, 2026

   • Add YAML Formatting Job (#3889)

     Show description for 11c909f
     

     nasbench

     and

     patel-bhavin

     authored
     11c909fView commit details

     Copy full SHA for 11c909f

     View code at this pointBrowse repository at this point
10. Commits on Jan 30, 2026

    • Fix Validation Issues (#3861)

      nasbench

      authored
      f49f3a3View commit details

      Copy full SHA for f49f3a3

      View code at this pointBrowse repository at this point
11. Commits on Jan 22, 2026

    • Updating Terminology for ES8+ (#3875)

      Show description for d080ba9
      

      patel-bhavin

      and

      nasbench

      authored
      d080ba9View commit details

      Copy full SHA for d080ba9

      View code at this pointBrowse repository at this point

    • Storm-0501 Ransomware Analytic Story and Tagging (#3871)

      Show description for b6b0b47
      

      3 peopleauthored
      b6b0b47View commit details

      Copy full SHA for b6b0b47

      View code at this pointBrowse repository at this point
12. Commits on Jan 20, 2026

    • O365 - Expand Detection of New MFA Devices (#3868)

      Show description for 2008331
      

      3 peopleauthored
      2008331View commit details

      Copy full SHA for 2008331

      View code at this pointBrowse repository at this point
13. Commits on Dec 2, 2025

    • Merge branch 'develop' into inspect_5.19

      patel-bhavin

      authored
      121be41View commit details

      Copy full SHA for 121be41

      View code at this pointBrowse repository at this point

    • updating versions

      patel-bhavin

      committed
      17f3101View commit details

      Copy full SHA for 17f3101

      View code at this pointBrowse repository at this point

    • chore: user_agent field fix in both the Azure AD authentication detections. Minor spelling mistake fixes. (#3811)

      Show description for 59c8727
      

      Shotscape

      and

      nasbench

      authored
      59c8727View commit details

      Copy full SHA for 59c8727

      View code at this pointBrowse repository at this point
14. Commits on Nov 25, 2025

    • npm Supply Chain Compromise & Lifecycle Hook Abuse Detection (#3806)

      Show description for 442e815
      

      3 peopleauthored
      442e815View commit details

      Copy full SHA for 442e815

      View code at this pointBrowse repository at this point
15. Commits on Oct 24, 2025

    • New Rules & Updates - Oct 25 (#3726)

      Show description for 9fc8942
      nasbench

      authored
      9fc8942View commit details

      Copy full SHA for 9fc8942

      View code at this pointBrowse repository at this point
16. Commits on Oct 21, 2025

    • Scattered Lapsus$ Hunters (#3724)

      Show description for 7b9274f
      

      3 peopleauthored
      7b9274fView commit details

      Copy full SHA for 7b9274f

      View code at this pointBrowse repository at this point
17. Commits on Oct 16, 2025

    • Hellcat United (#3723)

      Show description for a548ed7
      MHaggis

      authored
      a548ed7View commit details

      Copy full SHA for a548ed7

      View code at this pointBrowse repository at this point
18. Commits on Sep 29, 2025

    • Update azure_ad_multi_source_failed_authentications_spike.yml

      patel-bhavin

      authored
      68e7778View commit details

      Copy full SHA for 68e7778

      View code at this pointBrowse repository at this point
19. Commits on Sep 18, 2025

    • updateing based on issue

      patel-bhavin

      committed
      f450563View commit details

      Copy full SHA for f450563

      View code at this pointBrowse repository at this point
20. Commits on Sep 3, 2025

    • Correct Azure localization issues

      bserocki-splunk

      committed
      939ee28View commit details

      Copy full SHA for 939ee28

      View code at this pointBrowse repository at this point

    • Correct Azure localization issues

      bserocki-splunk

      committed
      7b24f8aView commit details

      Copy full SHA for 7b24f8a

      View code at this pointBrowse repository at this point
21. Commits on Aug 26, 2025

    • updating SPL to match the issue fix after testing

      patel-bhavin

      committed
      b04570fView commit details

      Copy full SHA for b04570f

      View code at this pointBrowse repository at this point

    • updating search and other meta

      patel-bhavin

      committed
      f6fdcd0View commit details

      Copy full SHA for f6fdcd0

      View code at this pointBrowse repository at this point
22. Commits on Aug 1, 2025

    • aad multiple denied mfa requests: updating version and date

      jakeenea51

      authored
      e4cfd3cView commit details

      Copy full SHA for e4cfd3c

      View code at this pointBrowse repository at this point

    • aad multiple denied mfa requests: add _time in 'stats count by' to limit to 10 min windows

      jakeenea51

      authored
      11a2f6aView commit details

      Copy full SHA for 11a2f6a

      View code at this pointBrowse repository at this point
23. Commits on Jul 24, 2025

    • update risk message

      0xC0FFEEEE

      authored
      3ccf82cView commit details

      Copy full SHA for 3ccf82c

      View code at this pointBrowse repository at this point
24. Commits on Jul 23, 2025

    • Add rule name to risk message

      0xC0FFEEEE

      authored
      1032077View commit details

      Copy full SHA for 1032077

      View code at this pointBrowse repository at this point

    • use correct drilldown field

      0xC0FFEEEE

      authored
      afefa15View commit details

      Copy full SHA for afefa15

      View code at this pointBrowse repository at this point

    • Add threshold filter

      Show description for 43fa38e
      0xC0FFEEEE

      authored
      43fa38eView commit details

      Copy full SHA for 43fa38e

      View code at this pointBrowse repository at this point