Commits

Commit history

1. Commits on Sep 29, 2026

   • improve format for attack data links so (#4299)

     Show description for cc18903
     pyth0n1c

     authored
     cc18903View commit details

     Copy full SHA for cc18903

     View code at this pointBrowse repository at this point

   • O365 message trace detections: support o365:graph:messagetrace (Office 365 add-on 6.x) (#4286)

     Show description for 9aff0d8
     

     sbaker-gre

     and

     nasbench

     authored
     9aff0d8View commit details

     Copy full SHA for 9aff0d8

     View code at this pointBrowse repository at this point

   • Windows Crowdstrike RTR Script Execution: match EDR sources without a parent command line (#4294)

     Show description for 21bcc53
     

     sbaker-gre

     and

     nasbench

     authored
     21bcc53View commit details

     Copy full SHA for 21bcc53

     View code at this pointBrowse repository at this point
2. Commits on Sep 24, 2026

   • Azure AD consent detections: repair Scope regex broken by a line wrap (#4291)

     Show description for 64acde7
     

     sbaker-gre

     and

     nasbench

     authored
     64acde7View commit details

     Copy full SHA for 64acde7

     View code at this pointBrowse repository at this point
3. Commits on Sep 23, 2026

   • expected_results should be 1 on lolbas detection (#4280)

     Show description for 9640c03
     

     tjgeorgen

     and

     nasbench

     authored
     9640c03View commit details

     Copy full SHA for 9640c03

     View code at this pointBrowse repository at this point
4. Commits on Sep 21, 2026

   • Maybe This is It? (#4279)

     nasbench

     authored
     1a41f94View commit details

     Copy full SHA for 1a41f94

     View code at this pointBrowse repository at this point

   • Fix Typo (#4278)

     nasbench

     authored
     424a788View commit details

     Copy full SHA for 424a788

     View code at this pointBrowse repository at this point

   • Tune and Add More Context to Noisy Detections (#4263)

     nasbench

     authored
     1f178cbView commit details

     Copy full SHA for 1f178cb

     View code at this pointBrowse repository at this point

   • macOS detection: Osascript Executing JavaScript Code With Objective-C (#4272)

     Show description for 8fb5650
     

     3 peopleauthored
     8fb5650View commit details

     Copy full SHA for 8fb5650

     View code at this pointBrowse repository at this point

   • macOS detection: Osascript Long Lived Connection To Remote Host (#4270)

     Show description for 840306f
     

     3 peopleauthored
     840306fView commit details

     Copy full SHA for 840306f

     View code at this pointBrowse repository at this point

   • macOS detection: MacOS Osascript Executing Interactive Shell (#4271)

     Show description for 0389108
     

     3 peopleauthored
     0389108View commit details

     Copy full SHA for 0389108

     View code at this pointBrowse repository at this point

   • Update EventID 10 Analytics (#4276)

     nasbench

     authored
     4ad4947View commit details

     Copy full SHA for 4ad4947

     View code at this pointBrowse repository at this point

   • Add Some Missing Threat Objects & References (#4262)

     Show description for da1d611
     

     nasbench

     and

     onurmerdogan

     authored
     da1d611View commit details

     Copy full SHA for da1d611

     View code at this pointBrowse repository at this point

   • Multiple Detections Against Recent ClickFix Campaigns (#4269)

     Show description for 790ce0a
     

     onurmerdogan

     and

     nasbench

     authored
     790ce0aView commit details

     Copy full SHA for 790ce0a

     View code at this pointBrowse repository at this point
5. Commits on Sep 18, 2026

   • Deprecate macos reopened applications (#4273)

     Show description for 7b6385a
     

     RavenTait

     and

     nasbench

     authored
     7b6385aView commit details

     Copy full SHA for 7b6385a

     View code at this pointBrowse repository at this point
6. Commits on Sep 8, 2026

   • Detection Against Content Copied From Browsers Executed through Run (#4261)

     onurmerdogan

     authored
     4cd62e8View commit details

     Copy full SHA for 4cd62e8

     View code at this pointBrowse repository at this point
7. Commits on Sep 7, 2026

   • Batch fixes from code review (#4260)

     rviskova13

     authored
     5b9754bView commit details

     Copy full SHA for 5b9754b

     View code at this pointBrowse repository at this point

   • Batch Fixes from Code Review (#4259)

     onurmerdogan

     authored
     855be18View commit details

     Copy full SHA for 855be18

     View code at this pointBrowse repository at this point

   • Add Socat Utility Detections (#4253)

     Show description for 225e705
     

     3 peopleauthored
     225e705View commit details

     Copy full SHA for 225e705

     View code at this pointBrowse repository at this point
8. Commits on Sep 6, 2026

   • macOS detection: MacOS Osascript Displaying Suspicious User Prompt (#4250)

     Show description for 4265636
     

     3 peopleauthored
     4265636View commit details

     Copy full SHA for 4265636

     View code at this pointBrowse repository at this point

   • Add Coverage For CVE-2026-47301 (#4236)

     Show description for aaf2ed2
     

     3 peopleauthored
     aaf2ed2View commit details

     Copy full SHA for aaf2ed2

     View code at this pointBrowse repository at this point
9. Commits on Sep 5, 2026

   • Add `Browser Spawned Unix Shell with External Connection` (#4256)

     Show description for e99ef18
     

     3 peopleauthored
     e99ef18View commit details

     Copy full SHA for e99ef18

     View code at this pointBrowse repository at this point

   • macOS detection: MacOS AppleScript Shell Execution and Compilation (#4257)

     Show description for 3e317f4
     

     3 peopleauthored
     3e317f4View commit details

     Copy full SHA for 3e317f4

     View code at this pointBrowse repository at this point
10. Commits on Sep 4, 2026

    • Minor Fixes Against False Positive Patterns (#4249)

      Show description for e86ae0f
      

      onurmerdogan

      and

      nasbench

      authored
      e86ae0fView commit details

      Copy full SHA for e86ae0f

      View code at this pointBrowse repository at this point

    • Content Updates & Fixes - Batch 6.6 (#4251)

      nasbench

      authored
      9b137ceView commit details

      Copy full SHA for 9b137ce

      View code at this pointBrowse repository at this point
11. Commits on Aug 31, 2026

    • Fix original_file_name field typo in whoami and arp discovery detections (#4245)

      Show description for 6e80f29
      

      munzzyy

      and

      nasbench

      authored
      6e80f29View commit details

      Copy full SHA for 6e80f29

      View code at this pointBrowse repository at this point
12. Commits on Aug 26, 2026

    • Small Robot Fixes (#4238)

      Show description for 0e6ea0a
      nasbench

      authored
      0e6ea0aView commit details

      Copy full SHA for 0e6ea0a

      View code at this pointBrowse repository at this point

    • updating minor text (#4237)

      patel-bhavin

      authored
      9563bc3View commit details

      Copy full SHA for 9563bc3

      View code at this pointBrowse repository at this point
13. Commits on Aug 24, 2026

    • Fix issues in batch - v6.5.0 (#4233)

      onurmerdogan

      authored
      a5e1ffdView commit details

      Copy full SHA for a5e1ffd

      View code at this pointBrowse repository at this point

    • Fix Issues & Deprecate Some Experimental Content (#4212)

      nasbench

      authored
      c574888View commit details

      Copy full SHA for c574888

      View code at this pointBrowse repository at this point

    • Update known_false_positives for Excessive Usage of NSLOOKUP App (#4231)

      Show description for 981dfb2
      

      fe-brain

      and

      nasbench

      authored
      981dfb2View commit details

      Copy full SHA for 981dfb2

      View code at this pointBrowse repository at this point
14. Commits on Aug 21, 2026

    • Add New Detections Against Malicious Python Package Activities (#4205)

      Show description for b21862c
      

      onurmerdogan

      and

      nasbench

      authored
      b21862cView commit details

      Copy full SHA for b21862c

      View code at this pointBrowse repository at this point
15. Commits on Aug 20, 2026

    • Add New Detections Covering ShieldBreak Exploitation (#4222)

      Show description for a2f99be
      

      onurmerdogan

      and

      nasbench

      authored
      a2f99beView commit details

      Copy full SHA for a2f99be

      View code at this pointBrowse repository at this point
16. Commits on Aug 19, 2026

    • Add Content and Tagging for Vidar Stealer (#4217)

      Show description for 4fede6c
      

      4 peopleauthored
      4fede6cView commit details

      Copy full SHA for 4fede6c

      View code at this pointBrowse repository at this point
17. Commits on Aug 18, 2026

    • add field ordering workflows and scripts (#4208)

      nasbench

      authored
      b4886ffView commit details

      Copy full SHA for b4886ff

      View code at this pointBrowse repository at this point