Commits

Commit history

1. Commits on Feb 17, 2026

   • Tag Content Related to Dynowiper/Zovwiper (#3907)

     Show description for c2044d9
     

     3 peopleauthored
     c2044d9View commit details

     Copy full SHA for c2044d9

     View code at this pointBrowse repository at this point

   • Add New MCP Related Detections (#3895)

     Show description for 0257368
     

     3 peopleauthored
     0257368View commit details

     Copy full SHA for 0257368

     View code at this pointBrowse repository at this point

   • Add Coverage and Tagging for the XML Runner Loader (#3897)

     Show description for 19181a8
     

     4 peopleauthored
     19181a8View commit details

     Copy full SHA for 19181a8

     View code at this pointBrowse repository at this point

   • Add SolarWinds WHD RCE Post Exploitation Coverage/Tagging (#3902)

     Show description for 6b9201d
     

     5 peopleauthored
     6b9201dView commit details

     Copy full SHA for 6b9201d

     View code at this pointBrowse repository at this point
2. Commits on Feb 11, 2026

   • Issue - 3901 (#3905)

     Show description for 79d2458
     patel-bhavin

     authored
     79d2458View commit details

     Copy full SHA for 79d2458

     View code at this pointBrowse repository at this point
3. Commits on Feb 10, 2026

   • upodated SPL based on new raw events (#3898)

     Show description for 7cf9641
     

     3 peopleauthored
     7cf9641View commit details

     Copy full SHA for 7cf9641

     View code at this pointBrowse repository at this point

   • Bump contentctl.yml to 5.22.0 (#3894)

     Show description for d13e377
     

     3 peopleauthored
     d13e377View commit details

     Copy full SHA for d13e377

     View code at this pointBrowse repository at this point
4. Commits on Feb 6, 2026

   • XML Windows Event Log Cleanup continued (#3887)

     Show description for 2e7660b
     

     ljstella

     and

     patel-bhavin

     authored
     2e7660bView commit details

     Copy full SHA for 2e7660b

     View code at this pointBrowse repository at this point
5. Commits on Feb 2, 2026

   • browser_hijacking_2 (#3879)

     Show description for b5280b6
     

     4 peopleauthored
     b5280b6View commit details

     Copy full SHA for b5280b6

     View code at this pointBrowse repository at this point

   • Add Windows TOR Client Execution Detected (#3881)

     Show description for 7777dd9
     

     vignesh-user

     and

     nasbench

     authored
     7777dd9View commit details

     Copy full SHA for 7777dd9

     View code at this pointBrowse repository at this point
6. Commits on Jan 31, 2026

   • Telnet Auth Bypass CVE (#3883)

     Show description for 56675d5
     

     3 peopleauthored
     56675d5View commit details

     Copy full SHA for 56675d5

     View code at this pointBrowse repository at this point

   • Update RBA, logic, and beautify some searches (#3880)

     Show description for a266563
     nasbench

     authored
     a266563View commit details

     Copy full SHA for a266563

     View code at this pointBrowse repository at this point
7. Commits on Jan 30, 2026

   • Fix Reported Issues (#3873)

     Show description for c50763d
     

     nasbench

     and

     patel-bhavin

     authored
     c50763dView commit details

     Copy full SHA for c50763d

     View code at this pointBrowse repository at this point

   • Add Missing Time to `Set Default PowerShell Execution Policy To Unrestricted or Bypass` (#3882)

     Show description for 28a213f
     

     4 peopleauthored
     28a213fView commit details

     Copy full SHA for 28a213f

     View code at this pointBrowse repository at this point

   • Fix Validation Issues (#3861)

     nasbench

     authored
     f49f3a3View commit details

     Copy full SHA for f49f3a3

     View code at this pointBrowse repository at this point
8. Commits on Jan 28, 2026

   • Update Outlook writing zip Analytic (#3877)

     Show description for 29ece39
     

     patel-bhavin

     and

     nasbench

     authored
     29ece39View commit details

     Copy full SHA for 29ece39

     View code at this pointBrowse repository at this point
9. Commits on Jan 24, 2026

   • Fix search typo in windows abused web services analytic (#3878)

     aaaAlexanderaaa

     authored
     f1693a1View commit details

     Copy full SHA for f1693a1

     View code at this pointBrowse repository at this point
10. Commits on Jan 23, 2026

    • Updating Query Based on XS Data (#3876)

      patel-bhavin

      authored
      060feb0View commit details

      Copy full SHA for 060feb0

      View code at this pointBrowse repository at this point
11. Commits on Jan 22, 2026

    • Updating Terminology for ES8+ (#3875)

      Show description for d080ba9
      

      patel-bhavin

      and

      nasbench

      authored
      d080ba9View commit details

      Copy full SHA for d080ba9

      View code at this pointBrowse repository at this point

    • Storm-0501 Ransomware Analytic Story and Tagging (#3871)

      Show description for b6b0b47
      

      3 peopleauthored
      b6b0b47View commit details

      Copy full SHA for b6b0b47

      View code at this pointBrowse repository at this point

    • VoidLink Tagging (#3870)

      Show description for d08d829
      

      3 peopleauthored
      d08d829View commit details

      Copy full SHA for d08d829

      View code at this pointBrowse repository at this point

    • stealc (#3833)

      Show description for 73e69c0
      

      4 peopleauthored
      73e69c0View commit details

      Copy full SHA for 73e69c0

      View code at this pointBrowse repository at this point

    • Additional information in Risk Message for Services LOLBAS spawn detection (#3874)

      Show description for 9c9482b
      

      3 peopleauthored
      9c9482bView commit details

      Copy full SHA for 9c9482b

      View code at this pointBrowse repository at this point

    • Update Analytics Performance (#3866)

      Show description for 76f629e
      

      nasbench

      and

      patel-bhavin

      authored
      76f629eView commit details

      Copy full SHA for 76f629e

      View code at this pointBrowse repository at this point
12. Commits on Jan 20, 2026

    • O365 - Expand Detection of New MFA Devices (#3868)

      Show description for 2008331
      

      3 peopleauthored
      2008331View commit details

      Copy full SHA for 2008331

      View code at this pointBrowse repository at this point
13. Commits on Jan 16, 2026

    • New Year, New Fixes

      ljstella

      committed
      c84715dView commit details

      Copy full SHA for c84715d

      View code at this pointBrowse repository at this point

    • Update version and date in prohibited network traffic config

      LaLaGuy

      authored
      4ce7a1dView commit details

      Copy full SHA for 4ce7a1d

      View code at this pointBrowse repository at this point
14. Commits on Jan 15, 2026

    • Fix formatting and syntax in prohibited network traffic YAML

      Show description for f9e8e6e
      LaLaGuy

      authored
      f9e8e6eView commit details

      Copy full SHA for f9e8e6e

      View code at this pointBrowse repository at this point

    • Refactor search query for prohibited network traffic

      Show description for e244380
      LaLaGuy

      authored
      e244380View commit details

      Copy full SHA for e244380

      View code at this pointBrowse repository at this point
15. Commits on Jan 14, 2026

    • fix (#3859)

      patel-bhavin

      authored
      5f2d1c7View commit details

      Copy full SHA for 5f2d1c7

      View code at this pointBrowse repository at this point
16. Commits on Jan 12, 2026

    • Analytic Enhancements and Fixes (#3850)

      Show description for 6cc12a9
      

      nasbench

      and

      patel-bhavin

      authored
      6cc12a9View commit details

      Copy full SHA for 6cc12a9

      View code at this pointBrowse repository at this point

    • Add Browser Hijack Analytics (#3841)

      Show description for 4967374
      

      4 peopleauthored
      4967374View commit details

      Copy full SHA for 4967374

      View code at this pointBrowse repository at this point

    • Add Snort/IOS Correlation and Other Things (#3857)

      nasbench

      authored
      7941673View commit details

      Copy full SHA for 7941673

      View code at this pointBrowse repository at this point
17. Commits on Jan 7, 2026

    • Add New Analytics Covering SesameOp and PromptFlux (#3827)

      Show description for edd6db0
      

      4 peopleauthored
      edd6db0View commit details

      Copy full SHA for edd6db0

      View code at this pointBrowse repository at this point

    • Detections for default user agents (#3842)

      Show description for 498a80d
      

      RavenTait

      and

      nasbench

      authored
      498a80dView commit details

      Copy full SHA for 498a80d

      View code at this pointBrowse repository at this point