Commits

Commit history

1. Commits on Jun 16, 2026

   • rogue_planet (#4121)

     Show description for 46e3f85
     

     4 peopleauthored
     46e3f85View commit details

     Copy full SHA for 46e3f85

     View code at this pointBrowse repository at this point

   • detection_fixes_2 (#4107)

     Show description for f443d99
     

     5 peopleauthored
     f443d99View commit details

     Copy full SHA for f443d99

     View code at this pointBrowse repository at this point

   • new_salat_stealer (#4118)

     Show description for fe5b181
     

     4 peopleauthored
     fe5b181View commit details

     Copy full SHA for fe5b181

     View code at this pointBrowse repository at this point

   • Fix broken regex alternation in detections (#4116)

     Show description for efd02f4
     

     3 peopleauthored
     efd02f4View commit details

     Copy full SHA for efd02f4

     View code at this pointBrowse repository at this point

   • 2026-20127 (#4119)

     Show description for a1136e4
     

     4 peopleauthored
     a1136e4View commit details

     Copy full SHA for a1136e4

     View code at this pointBrowse repository at this point
2. Commits on Jun 15, 2026

   • Add New BlueHammer / RedSun Analytics (#4037)

     Show description for fad1a59
     

     3 peopleauthored
     fad1a59View commit details

     Copy full SHA for fad1a59

     View code at this pointBrowse repository at this point

   • PTC Windchill (#4124)

     Show description for e9400d9
     

     nasbench

     and

     patel-bhavin

     authored
     e9400d9View commit details

     Copy full SHA for e9400d9

     View code at this pointBrowse repository at this point

   • new o11y secure application detection (#4108)

     Show description for 7870ff5
     

     3 peopleauthored
     7870ff5View commit details

     Copy full SHA for 7870ff5

     View code at this pointBrowse repository at this point

   • Rewrote HTTP Scripting Tool User Agent to Web DM (#4125)

     Show description for 0e953aa
     

     3 peopleauthored
     0e953aaView commit details

     Copy full SHA for 0e953aa

     View code at this pointBrowse repository at this point
3. Commits on Jun 12, 2026

   • Copyfail and DIrtyFrag (#4081)

     Show description for 255bd3c
     

     3 peopleauthored
     255bd3cView commit details

     Copy full SHA for 255bd3c

     View code at this pointBrowse repository at this point
4. Commits on Jun 11, 2026

   • fix: compare AD self-add user fields case-insensitively (#4112)

     Show description for ca8e656
     

     srkyn

     and

     nasbench

     authored
     ca8e656View commit details

     Copy full SHA for ca8e656

     View code at this pointBrowse repository at this point
5. Commits on Jun 9, 2026

   • Salt TTP (#4114)

     Show description for 725b0c3
     nasbench

     authored
     725b0c3View commit details

     Copy full SHA for 725b0c3

     View code at this pointBrowse repository at this point

   • Cisco Secure Access - Add New DNS and Proxy Detections (#4066)

     Show description for b960f93
     

     patel-bhavin

     and

     nasbench

     authored
     b960f93View commit details

     Copy full SHA for b960f93

     View code at this pointBrowse repository at this point
6. Commits on Jun 8, 2026

   • Fix regsvr32 typo (#4117)

     Show description for 1610a7c
     srkyn

     authored
     1610a7cView commit details

     Copy full SHA for 1610a7c

     View code at this pointBrowse repository at this point

   • Bump contentctl.yml and build.yml to 6.1.0 (#4113)

     Show description for 0c3e588
     

     patel-bhavin

     and

     research bot

     authored
     0c3e588View commit details

     Copy full SHA for 0c3e588

     View code at this pointBrowse repository at this point
7. Commits on May 20, 2026

   • yamlfmt

     ljstella

     committed
     0c869bfView commit details

     Copy full SHA for 0c869bf

     View code at this pointBrowse repository at this point
8. Commits on May 19, 2026

   • Reordering key

     ljstella

     committed
     d7b8c0fView commit details

     Copy full SHA for d7b8c0f

     View code at this pointBrowse repository at this point

   • Update detections/web/monitor_web_traffic_for_brand_abuse.yml

     Show description for d235c3e
     

     ljstella

     and

     nasbench

     authored
     d235c3eView commit details

     Copy full SHA for d235c3e

     View code at this pointBrowse repository at this point

   • Reordering keys

     ljstella

     committed
     bc18194View commit details

     Copy full SHA for bc18194

     View code at this pointBrowse repository at this point

   • Baseline cleanup

     ljstella

     committed
     b196ddcView commit details

     Copy full SHA for b196ddc

     View code at this pointBrowse repository at this point

   • message cleanup

     ljstella

     committed
     53565feView commit details

     Copy full SHA for 53565fe

     View code at this pointBrowse repository at this point

   • Multiple user type entities

     ljstella

     committed
     15c349bView commit details

     Copy full SHA for 15c349b

     View code at this pointBrowse repository at this point

   • Unbalanced $ in message

     ljstella

     committed
     e52095cView commit details

     Copy full SHA for e52095c

     View code at this pointBrowse repository at this point

   • Multiple non-user but no user

     ljstella

     committed
     baf4b85View commit details

     Copy full SHA for baf4b85

     View code at this pointBrowse repository at this point

   • Manual Review of correlation searches

     ljstella

     committed
     9dfb170View commit details

     Copy full SHA for 9dfb170

     View code at this pointBrowse repository at this point
9. Commits on May 13, 2026

   • Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creat…

     Show description for db8c7c8
     pyth0n1c

     committed
     db8c7c8View commit details

     Copy full SHA for db8c7c8

     View code at this pointBrowse repository at this point
10. Commits on May 5, 2026

    • Update Analytics to Support ATT&CK v19 (#4036)

      Show description for 9c183fa
      

      3 peopleauthored
      9c183faView commit details

      Copy full SHA for 9c183fa

      View code at this pointBrowse repository at this point

    • Add Big Batch of Snap Attack Converted Rules (#4015)

      Show description for 917fe77
      

      3 peopleauthored
      917fe77View commit details

      Copy full SHA for 917fe77

      View code at this pointBrowse repository at this point

    • Add Analytic for Copy Fail (#4063)

      Show description for 4d4c7ee
      

      RavenTait

      and

      nasbench

      authored
      4d4c7eeView commit details

      Copy full SHA for 4d4c7ee

      View code at this pointBrowse repository at this point
11. Commits on May 4, 2026

    • Improved detections based on telemetry data (#4011)

      Show description for a9aaf49
      

      4 peopleauthored
      a9aaf49View commit details

      Copy full SHA for a9aaf49

      View code at this pointBrowse repository at this point
12. Commits on Apr 29, 2026

    • Add Secure Access Firewall Detections (#3986)

      Show description for becdb58
      

      3 peopleauthored
      becdb58View commit details

      Copy full SHA for becdb58

      View code at this pointBrowse repository at this point

    • Fixed two detections, and improved macos keychain dumping for more coverage of the technique (#4034)

      Show description for c5e9d4a
      

      jwindley

      and

      nasbench

      authored
      c5e9d4aView commit details

      Copy full SHA for c5e9d4a

      View code at this pointBrowse repository at this point

    • vip_keylogger (#4024)

      Show description for 9972c09
      

      4 peopleauthored
      9972c09View commit details

      Copy full SHA for 9972c09

      View code at this pointBrowse repository at this point
13. Commits on Apr 17, 2026

    • updating risk drilldowns (#4016)

      Show description for ba59855
      patel-bhavin

      authored
      ba59855View commit details

      Copy full SHA for ba59855

      View code at this pointBrowse repository at this point
14. Commits on Apr 16, 2026

    • Fix Issues - 2nd Round (#3996)

      Show description for ea5bd52
      

      nasbench

      and

      patel-bhavin

      authored
      ea5bd52View commit details

      Copy full SHA for ea5bd52

      View code at this pointBrowse repository at this point