Commits

Commit history

1. Commits on Jun 12, 2026

   • Copyfail and DIrtyFrag (#4081)

     Show description for 255bd3c
     

     3 peopleauthored
     255bd3cView commit details

     Copy full SHA for 255bd3c

     View code at this pointBrowse repository at this point
2. Commits on Jun 11, 2026

   • fix: compare AD self-add user fields case-insensitively (#4112)

     Show description for ca8e656
     

     srkyn

     and

     nasbench

     authored
     ca8e656View commit details

     Copy full SHA for ca8e656

     View code at this pointBrowse repository at this point
3. Commits on Jun 8, 2026

   • Fix regsvr32 typo (#4117)

     Show description for 1610a7c
     srkyn

     authored
     1610a7cView commit details

     Copy full SHA for 1610a7c

     View code at this pointBrowse repository at this point
4. Commits on May 19, 2026

   • Reordering keys

     ljstella

     committed
     bc18194View commit details

     Copy full SHA for bc18194

     View code at this pointBrowse repository at this point

   • message cleanup

     ljstella

     committed
     53565feView commit details

     Copy full SHA for 53565fe

     View code at this pointBrowse repository at this point

   • Multiple user type entities

     ljstella

     committed
     15c349bView commit details

     Copy full SHA for 15c349b

     View code at this pointBrowse repository at this point

   • Multiple non-user but no user

     ljstella

     committed
     baf4b85View commit details

     Copy full SHA for baf4b85

     View code at this pointBrowse repository at this point

   • Manual Review of correlation searches

     ljstella

     committed
     9dfb170View commit details

     Copy full SHA for 9dfb170

     View code at this pointBrowse repository at this point
5. Commits on May 13, 2026

   • Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creat…

     Show description for db8c7c8
     pyth0n1c

     committed
     db8c7c8View commit details

     Copy full SHA for db8c7c8

     View code at this pointBrowse repository at this point
6. Commits on May 5, 2026

   • Update Analytics to Support ATT&CK v19 (#4036)

     Show description for 9c183fa
     

     3 peopleauthored
     9c183faView commit details

     Copy full SHA for 9c183fa

     View code at this pointBrowse repository at this point

   • Add Big Batch of Snap Attack Converted Rules (#4015)

     Show description for 917fe77
     

     3 peopleauthored
     917fe77View commit details

     Copy full SHA for 917fe77

     View code at this pointBrowse repository at this point

   • Add Analytic for Copy Fail (#4063)

     Show description for 4d4c7ee
     

     RavenTait

     and

     nasbench

     authored
     4d4c7eeView commit details

     Copy full SHA for 4d4c7ee

     View code at this pointBrowse repository at this point
7. Commits on May 4, 2026

   • Improved detections based on telemetry data (#4011)

     Show description for a9aaf49
     

     4 peopleauthored
     a9aaf49View commit details

     Copy full SHA for a9aaf49

     View code at this pointBrowse repository at this point
8. Commits on Apr 29, 2026

   • Fixed two detections, and improved macos keychain dumping for more coverage of the technique (#4034)

     Show description for c5e9d4a
     

     jwindley

     and

     nasbench

     authored
     c5e9d4aView commit details

     Copy full SHA for c5e9d4a

     View code at this pointBrowse repository at this point

   • vip_keylogger (#4024)

     Show description for 9972c09
     

     4 peopleauthored
     9972c09View commit details

     Copy full SHA for 9972c09

     View code at this pointBrowse repository at this point
9. Commits on Apr 17, 2026

   • updating risk drilldowns (#4016)

     Show description for ba59855
     patel-bhavin

     authored
     ba59855View commit details

     Copy full SHA for ba59855

     View code at this pointBrowse repository at this point
10. Commits on Apr 16, 2026

    • Fix Issues - 2nd Round (#3996)

      Show description for ea5bd52
      

      nasbench

      and

      patel-bhavin

      authored
      ea5bd52View commit details

      Copy full SHA for ea5bd52

      View code at this pointBrowse repository at this point

    • Remove missing fields in Windows Event Log Cleared detection (#4001)

      Show description for c624166
      

      4 peopleauthored
      c624166View commit details

      Copy full SHA for c624166

      View code at this pointBrowse repository at this point
11. Commits on Apr 15, 2026

    • Merge branch 'develop' into 5.25.1_changes_for_develop

      pyth0n1c

      authored
      3c16b13View commit details

      Copy full SHA for 3c16b13

      View code at this pointBrowse repository at this point

    • Fix version and date and update contentctl version in prep for release.

      pyth0n1c

      committed
      6a8bfe9View commit details

      Copy full SHA for 6a8bfe9

      View code at this pointBrowse repository at this point

    • New MacOS detections T1016 (#4017)

      Show description for 80b29d6
      

      3 peopleauthored
      80b29d6View commit details

      Copy full SHA for 80b29d6

      View code at this pointBrowse repository at this point
12. Commits on Apr 14, 2026

    • Snap Mac Detections (#3935)

      Show description for 8050483
      

      RavenTait

      and

      nasbench

      authored
      8050483View commit details

      Copy full SHA for 8050483

      View code at this pointBrowse repository at this point
13. Commits on Apr 13, 2026

    • Spelling Fixes (#4002)

      Show description for 8d25102
      

      ljstella

      and

      nasbench

      authored
      8d25102View commit details

      Copy full SHA for 8d25102

      View code at this pointBrowse repository at this point
14. Commits on Apr 2, 2026

    • Tagged Analytics Covering the Axios Compromise Post-Exploitation Activity (#3982)

      Show description for 7293d75
      

      tccontre

      and

      nasbench

      authored
      7293d75View commit details

      Copy full SHA for 7293d75

      View code at this pointBrowse repository at this point

    • Add Filter for VMware Tools (#3983)

      RavenTait

      authored
      f416da5View commit details

      Copy full SHA for f416da5

      View code at this pointBrowse repository at this point
15. Commits on Mar 31, 2026

    • Fix Broken RBA Message (#3984)

      nasbench

      authored
      fd53a21View commit details

      Copy full SHA for fd53a21

      View code at this pointBrowse repository at this point
16. Commits on Mar 30, 2026

    • First pass of RBA message fix

      ljstella

      committed
      d38d8e1View commit details

      Copy full SHA for d38d8e1

      View code at this pointBrowse repository at this point

    • gh0st (#3973)

      Show description for ff78e2d
      

      3 peopleauthored
      ff78e2dView commit details

      Copy full SHA for ff78e2d

      View code at this pointBrowse repository at this point

    • Fix Reported Issues - April Batch (#3962)

      Show description for bc1b413
      

      nasbench

      and

      patel-bhavin

      authored
      bc1b413View commit details

      Copy full SHA for bc1b413

      View code at this pointBrowse repository at this point
17. Commits on Mar 28, 2026

    • Update Suricata TA and Related Analytics (#3974)

      Show description for b87507b
      

      nasbench

      and

      ljstella

      authored
      b87507bView commit details

      Copy full SHA for b87507b

      View code at this pointBrowse repository at this point
18. Commits on Mar 27, 2026

    • Tune detections based on Athena FPs (#3972)

      Show description for 89391cf
      

      3 peopleauthored
      89391cfView commit details

      Copy full SHA for 89391cf

      View code at this pointBrowse repository at this point

    • Update ryuk_wake_on_lan_command.yml

      nasbench

      committed
      30e0c54View commit details

      Copy full SHA for 30e0c54

      View code at this pointBrowse repository at this point

    • bug fix

      

      P4T12ICK

      committed
      44f3125View commit details

      Copy full SHA for 44f3125

      View code at this pointBrowse repository at this point

    • bug fix

      

      P4T12ICK

      committed
      0b219a6View commit details

      Copy full SHA for 0b219a6

      View code at this pointBrowse repository at this point

    • changed back to Anomaly

      

      P4T12ICK

      committed
      8be3693View commit details

      Copy full SHA for 8be3693

      View code at this pointBrowse repository at this point