Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
mbarnes-code
security_content
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
security_content
detections
cloud
on
develop
User selector
All users
Datepicker
All time
Commit history
Commits on Jan 30, 2026
Fix Validation Issues (#3861)
nasbench
authored
f49f3a3
View commit details
Copy full SHA for f49f3a3
View code at this point
Browse repository at this point
Commits on Jan 22, 2026
Updating Terminology for ES8+ (#3875)
Show description for d080ba9
patel-bhavin
and
nasbench
authored
d080ba9
View commit details
Copy full SHA for d080ba9
View code at this point
Browse repository at this point
Storm-0501 Ransomware Analytic Story and Tagging (#3871)
Show description for b6b0b47
3 people
authored
b6b0b47
View commit details
Copy full SHA for b6b0b47
View code at this point
Browse repository at this point
Commits on Jan 20, 2026
O365 - Expand Detection of New MFA Devices (#3868)
Show description for 2008331
3 people
authored
2008331
View commit details
Copy full SHA for 2008331
View code at this point
Browse repository at this point
Commits on Dec 2, 2025
Merge branch 'develop' into inspect_5.19
patel-bhavin
authored
121be41
View commit details
Copy full SHA for 121be41
View code at this point
Browse repository at this point
updating versions
patel-bhavin
committed
17f3101
View commit details
Copy full SHA for 17f3101
View code at this point
Browse repository at this point
chore: user_agent field fix in both the Azure AD authentication detections. Minor spelling mistake fixes. (#3811)
Show description for 59c8727
Shotscape
and
nasbench
authored
59c8727
View commit details
Copy full SHA for 59c8727
View code at this point
Browse repository at this point
Commits on Nov 25, 2025
npm Supply Chain Compromise & Lifecycle Hook Abuse Detection (#3806)
Show description for 442e815
3 people
authored
442e815
View commit details
Copy full SHA for 442e815
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
New Rules & Updates - Oct 25 (#3726)
Show description for 9fc8942
nasbench
authored
9fc8942
View commit details
Copy full SHA for 9fc8942
View code at this point
Browse repository at this point
Commits on Oct 21, 2025
Scattered Lapsus$ Hunters (#3724)
Show description for 7b9274f
3 people
authored
7b9274f
View commit details
Copy full SHA for 7b9274f
View code at this point
Browse repository at this point
Commits on Oct 16, 2025
Hellcat United (#3723)
Show description for a548ed7
MHaggis
authored
a548ed7
View commit details
Copy full SHA for a548ed7
View code at this point
Browse repository at this point
Commits on Sep 29, 2025
Update azure_ad_multi_source_failed_authentications_spike.yml
patel-bhavin
authored
68e7778
View commit details
Copy full SHA for 68e7778
View code at this point
Browse repository at this point
Commits on Sep 18, 2025
updateing based on issue
patel-bhavin
committed
f450563
View commit details
Copy full SHA for f450563
View code at this point
Browse repository at this point
Commits on Sep 3, 2025
Correct Azure localization issues
bserocki-splunk
committed
939ee28
View commit details
Copy full SHA for 939ee28
View code at this point
Browse repository at this point
Correct Azure localization issues
bserocki-splunk
committed
7b24f8a
View commit details
Copy full SHA for 7b24f8a
View code at this point
Browse repository at this point
Commits on Aug 26, 2025
updating SPL to match the issue fix after testing
patel-bhavin
committed
b04570f
View commit details
Copy full SHA for b04570f
View code at this point
Browse repository at this point
updating search and other meta
patel-bhavin
committed
f6fdcd0
View commit details
Copy full SHA for f6fdcd0
View code at this point
Browse repository at this point
Commits on Aug 1, 2025
aad multiple denied mfa requests: updating version and date
jakeenea51
authored
e4cfd3c
View commit details
Copy full SHA for e4cfd3c
View code at this point
Browse repository at this point
aad multiple denied mfa requests: add _time in 'stats count by' to limit to 10 min windows
jakeenea51
authored
11a2f6a
View commit details
Copy full SHA for 11a2f6a
View code at this point
Browse repository at this point
Commits on Jul 24, 2025
update risk message
0xC0FFEEEE
authored
3ccf82c
View commit details
Copy full SHA for 3ccf82c
View code at this point
Browse repository at this point
Commits on Jul 23, 2025
Add rule name to risk message
0xC0FFEEEE
authored
1032077
View commit details
Copy full SHA for 1032077
View code at this point
Browse repository at this point
use correct drilldown field
0xC0FFEEEE
authored
afefa15
View commit details
Copy full SHA for afefa15
View code at this point
Browse repository at this point
Add threshold filter
Show description for 43fa38e
0xC0FFEEEE
authored
43fa38e
View commit details
Copy full SHA for 43fa38e
View code at this point
Browse repository at this point
Commits on Jul 3, 2025
remove unneccesary json normalization
0xC0FFEEEE
authored
a278863
View commit details
Copy full SHA for a278863
View code at this point
Browse repository at this point
Commits on Jul 1, 2025
Add support for Set-InboxRule
0xC0FFEEEE
authored
3ba50a2
View commit details
Copy full SHA for 3ba50a2
View code at this point
Browse repository at this point
Commits on Jun 24, 2025
Version bumps
ljstella
committed
0f3feac
View commit details
Copy full SHA for 0f3feac
View code at this point
Browse repository at this point
Updated docs links in detections
ljstella
committed
397107f
View commit details
Copy full SHA for 397107f
View code at this point
Browse repository at this point
Commits on Jun 17, 2025
Version bump
ljstella
committed
437b5cf
View commit details
Copy full SHA for 437b5cf
View code at this point
Browse repository at this point
Silly casing...
ljstella
committed
bded2e9
View commit details
Copy full SHA for bded2e9
View code at this point
Browse repository at this point
Swap detections to experimental as test data no longer matches expectations of TA
ljstella
committed
342b06c
View commit details
Copy full SHA for 342b06c
View code at this point
Browse repository at this point
change to supported sourcetype
ljstella
committed
ff624b0
View commit details
Copy full SHA for ff624b0
View code at this point
Browse repository at this point
Merge branch 'develop' into updates-june
nasbench
authored
4801780
View commit details
Copy full SHA for 4801780
View code at this point
Browse repository at this point
Commits on Jun 16, 2025
more updates
nasbench
committed
6c5aa91
View commit details
Copy full SHA for 6c5aa91
View code at this point
Browse repository at this point
update to fix ci errors
nasbench
committed
feb9ec4
View commit details
Copy full SHA for feb9ec4
View code at this point
Browse repository at this point
Commits on Jun 12, 2025
Initial remote employment fraud detections.
RavenTait
committed
25617e6
View commit details
Copy full SHA for 25617e6
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.