Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
ryanbsaunders
security_content
Repository navigation
Code
Pull requests
28
(28)
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
security_content
detections
on
develop
User selector
All users
Datepicker
All time
Commit history
Commits on Dec 9, 2025
Message formatting changes
ljstella
committed
ef25eda
View commit details
Copy full SHA for ef25eda
View code at this point
Browse repository at this point
RBA Messages
ljstella
committed
50fff2d
View commit details
Copy full SHA for 50fff2d
View code at this point
Browse repository at this point
Commits on Dec 8, 2025
Update linux_suspicious_react_or_next_js_child_process.yml
nasbench
committed
8a1e1c1
View commit details
Copy full SHA for 8a1e1c1
View code at this point
Browse repository at this point
Update linux_suspicious_react_or_next_js_child_process.yml
nasbench
committed
4aa1c0b
View commit details
Copy full SHA for 4aa1c0b
View code at this point
Browse repository at this point
Add tuoni content and named pipe detection (#3816)
Show description for 6032db5
RavenTait
and
nasbench
authored
6032db5
View commit details
Copy full SHA for 6032db5
View code at this point
Browse repository at this point
Add React2Shell Snort Mapping (#3822)
nasbench
authored
5dca2ea
View commit details
Copy full SHA for 5dca2ea
View code at this point
Browse repository at this point
React2Shell Analytics (#3819)
nasbench
authored
5d7c65d
View commit details
Copy full SHA for 5d7c65d
View code at this point
Browse repository at this point
Update detections/network/cisco_secure_firewall___intrusion_events_by_threat_activity.yml
nasbench
authored
431e06d
View commit details
Copy full SHA for 431e06d
View code at this point
Browse repository at this point
add lokibot
nasbench
committed
5e86aa2
View commit details
Copy full SHA for 5e86aa2
View code at this point
Browse repository at this point
re-order alphabetically
nasbench
committed
b3d3fee
View commit details
Copy full SHA for b3d3fee
View code at this point
Browse repository at this point
update snort lookup
nasbench
committed
ce6fbc2
View commit details
Copy full SHA for ce6fbc2
View code at this point
Browse repository at this point
Commits on Dec 2, 2025
Merge branch 'develop' into fix_cwd_path_detections
nasbench
authored
d8ddca1
View commit details
Copy full SHA for d8ddca1
View code at this point
Browse repository at this point
update descriptions
nasbench
committed
8cff5c0
View commit details
Copy full SHA for 8cff5c0
View code at this point
Browse repository at this point
Internal horizontal port scan nmap iteration (#3802)
Show description for 064cbae
3 people
authored
064cbae
View commit details
Copy full SHA for 064cbae
View code at this point
Browse repository at this point
update indentations and logic
nasbench
committed
ff4fda6
View commit details
Copy full SHA for ff4fda6
View code at this point
Browse repository at this point
Merge branch 'develop' into inspect_5.19
patel-bhavin
authored
121be41
View commit details
Copy full SHA for 121be41
View code at this point
Browse repository at this point
updating versions
patel-bhavin
committed
17f3101
View commit details
Copy full SHA for 17f3101
View code at this point
Browse repository at this point
chore: user_agent field fix in both the Azure AD authentication detections. Minor spelling mistake fixes. (#3811)
Show description for 59c8727
Shotscape
and
nasbench
authored
59c8727
View commit details
Copy full SHA for 59c8727
View code at this point
Browse repository at this point
Commits on Nov 28, 2025
fix_cwd_path_detections
t-contreras
committed
ab35d31
View commit details
Copy full SHA for ab35d31
View code at this point
Browse repository at this point
Commits on Nov 27, 2025
fix_cwd_path_detections
t-contreras
committed
0d47dd6
View commit details
Copy full SHA for 0d47dd6
View code at this point
Browse repository at this point
Commits on Nov 25, 2025
npm Supply Chain Compromise & Lifecycle Hook Abuse Detection (#3806)
Show description for 442e815
3 people
authored
442e815
View commit details
Copy full SHA for 442e815
View code at this point
Browse repository at this point
Commits on Nov 24, 2025
Rod- Suspicious Local LLM Frameworks (#3780)
Show description for b53280a
3 people
authored
b53280a
View commit details
Copy full SHA for b53280a
View code at this point
Browse repository at this point
Commits on Nov 21, 2025
Add New ASA Analytics (#3794)
Show description for 515d736
nasbench
and
patel-bhavin
authored
515d736
View commit details
Copy full SHA for 515d736
View code at this point
Browse repository at this point
netsupport (#3798)
Show description for 888c224
4 people
authored
888c224
View commit details
Copy full SHA for 888c224
View code at this point
Browse repository at this point
CIM App name and Switch sourcetypes (#3799)
Show description for 19d3c48
patel-bhavin
and
nasbench
authored
19d3c48
View commit details
Copy full SHA for 19d3c48
View code at this point
Browse repository at this point
Commits on Nov 18, 2025
NTLM Reflection via DNS Object SPN Spoofing (#3789)
Show description for 001a152
RavenTait
and
patel-bhavin
authored
001a152
View commit details
Copy full SHA for 001a152
View code at this point
Browse repository at this point
Commits on Nov 14, 2025
Suspicious mshta child process minor fixes (#3787)
Show description for 6bf3fa8
DipsyTipsy
and
nasbench
authored
6bf3fa8
View commit details
Copy full SHA for 6bf3fa8
View code at this point
Browse repository at this point
Commits on Nov 13, 2025
switching source and sourcetype (#3779)
patel-bhavin
authored
45c4965
View commit details
Copy full SHA for 45c4965
View code at this point
Browse repository at this point
execution of file with multiple extensions: fixing rtf.exe (#3778)
jakeenea51
authored
bde912d
View commit details
Copy full SHA for bde912d
View code at this point
Browse repository at this point
Commits on Nov 10, 2025
Automated Splunk TA Update 440 (#3761)
Show description for e42da6e
patel-bhavin
authored
e42da6e
View commit details
Copy full SHA for e42da6e
View code at this point
Browse repository at this point
Commits on Nov 7, 2025
castlerat (#3750)
Show description for fcf1275
3 people
authored
fcf1275
View commit details
Copy full SHA for fcf1275
View code at this point
Browse repository at this point
Commits on Nov 5, 2025
Removed grouping by dest (#3759)
Show description for 5b8befe
lyonheart14
and
patel-bhavin
authored
5b8befe
View commit details
Copy full SHA for 5b8befe
View code at this point
Browse repository at this point
Commits on Oct 30, 2025
updating version and removing detections (#3749)
patel-bhavin
authored
c5413e9
View commit details
Copy full SHA for c5413e9
View code at this point
Browse repository at this point
Commits on Oct 27, 2025
detection_fixed (#3746)
Show description for d2ca19a
3 people
authored
d2ca19a
View commit details
Copy full SHA for d2ca19a
View code at this point
Browse repository at this point
WSUSpect in Custody: CVE-2025-59287 (#3743)
Show description for 58bf9a1
MHaggis
and
nasbench
authored
58bf9a1
View commit details
Copy full SHA for 58bf9a1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.