Commits

Commit history

1. Commits on Oct 14, 2026

   • Fix Failing Integration Tests (#4338)

     Show description for adc69d9
     

     pyth0n1c

     and

     nasbench

     authored
     adc69d9View commit details

     Copy full SHA for adc69d9

     View code at this pointBrowse repository at this point

   • Updating Set of Nirsoft Detections (#4303)

     Show description for 13bf175
     

     onurmerdogan

     and

     nasbench

     authored
     13bf175View commit details

     Copy full SHA for 13bf175

     View code at this pointBrowse repository at this point
2. Commits on Oct 12, 2026

   • Add Atomic GUID Mappings - Batch 1 (#4315)

     nasbench

     authored
     c653da7View commit details

     Copy full SHA for c653da7

     View code at this pointBrowse repository at this point
3. Commits on Oct 9, 2026

   • Fix #4275 (#4330)

     nasbench

     authored
     d84e86dView commit details

     Copy full SHA for d84e86d

     View code at this pointBrowse repository at this point

   • Remove `CrowdStrike ProcessRollup2` Reference from Content Using `parent_process` (#4316)

     nasbench

     authored
     dd8c9a3View commit details

     Copy full SHA for dd8c9a3

     View code at this pointBrowse repository at this point
4. Commits on Oct 7, 2026

   • Push changed to a bunch of files that should not have been bumped

     pyth0n1c

     committed
     52449e2View commit details

     Copy full SHA for 52449e2

     View code at this pointBrowse repository at this point

   • another detection that was bumped accidentally

     pyth0n1c

     authored
     d339507View commit details

     Copy full SHA for d339507

     View code at this pointBrowse repository at this point

   • Decrement version on detection that should not have been bumped

     Show description for c324183
     pyth0n1c

     authored
     c324183View commit details

     Copy full SHA for c324183

     View code at this pointBrowse repository at this point
5. Commits on Oct 6, 2026

   • Extra Logic Fixes From Codex (#4319)

     nasbench

     authored
     2dc3668View commit details

     Copy full SHA for 2dc3668

     View code at this pointBrowse repository at this point

   • More Codex Fixes (#4318)

     nasbench

     authored
     ce03ed3View commit details

     Copy full SHA for ce03ed3

     View code at this pointBrowse repository at this point
6. Commits on Oct 5, 2026

   • Apply codex reviews (#4317)

     nasbench

     authored
     0443d7bView commit details

     Copy full SHA for 0443d7b

     View code at this pointBrowse repository at this point

   • Update detections/endpoint/wmi_permanent_event_subscription.yml

     Show description for 2e906db
     

     nasbench

     and

     onurmerdogan

     authored
     2e906dbView commit details

     Copy full SHA for 2e906db

     View code at this pointBrowse repository at this point

   • Update wmi_permanent_event_subscription___sysmon.yml

     nasbench

     committed
     ec66842View commit details

     Copy full SHA for ec66842

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into wmi-filters-update

     nasbench

     authored
     37f8a32View commit details

     Copy full SHA for 37f8a32

     View code at this pointBrowse repository at this point

   • version update

     nasbench

     committed
     3115df7View commit details

     Copy full SHA for 3115df7

     View code at this pointBrowse repository at this point

   • New Approach on Handling Renamed Binaries (#4283)

     Show description for 152e2f5
     

     onurmerdogan

     and

     nasbench

     authored
     152e2f5View commit details

     Copy full SHA for 152e2f5

     View code at this pointBrowse repository at this point

   • Update wmi_permanent_event_subscription___sysmon.yml

     nasbench

     committed
     d032dd9View commit details

     Copy full SHA for d032dd9

     View code at this pointBrowse repository at this point

   • update wmi filters analytics

     nasbench

     committed
     fb58f09View commit details

     Copy full SHA for fb58f09

     View code at this pointBrowse repository at this point

   • Kerberloss Detections (#4296)

     Show description for 69bbd30
     

     3 peopleauthored
     69bbd30View commit details

     Copy full SHA for 69bbd30

     View code at this pointBrowse repository at this point

   • Add Missing `local=t` From Lookup Calls (#4282)

     nasbench

     authored
     9c941e6View commit details

     Copy full SHA for 9c941e6

     View code at this pointBrowse repository at this point

   • Update `how_to_implement` Section For NVM Content (#4281)

     nasbench

     authored
     dffaa04View commit details

     Copy full SHA for dffaa04

     View code at this pointBrowse repository at this point
7. Commits on Oct 2, 2026

   • Deprecate Child Processes of spoolsv.exe detection (#4310)

     Show description for 3db0f54
     

     rviskova13

     and

     nasbench

     authored
     3db0f54View commit details

     Copy full SHA for 3db0f54

     View code at this pointBrowse repository at this point
8. Commits on Oct 1, 2026

   • Merge branch 'develop' into shieldcrash_detections

     nasbench

     authored
     c2ab7d6View commit details

     Copy full SHA for c2ab7d6

     View code at this pointBrowse repository at this point

   • Update windows_defender_intermediary_artifact_was_observed.yml

     nasbench

     committed
     466d5b3View commit details

     Copy full SHA for 466d5b3

     View code at this pointBrowse repository at this point

   • Add New Rule Covering ResetNightmare (#4289)

     Show description for 964fd33
     

     RavenTait

     and

     nasbench

     authored
     964fd33View commit details

     Copy full SHA for 964fd33

     View code at this pointBrowse repository at this point
9. Commits on Sep 30, 2026

   • New Detection Coverage for ShieldCrash Exploit

     onurmerdogan

     committed
     4a7da06View commit details

     Copy full SHA for 4a7da06

     View code at this pointBrowse repository at this point
10. Commits on Sep 29, 2026

    • improve format for attack data links so (#4299)

      Show description for cc18903
      pyth0n1c

      authored
      cc18903View commit details

      Copy full SHA for cc18903

      View code at this pointBrowse repository at this point

    • Windows Crowdstrike RTR Script Execution: match EDR sources without a parent command line (#4294)

      Show description for 21bcc53
      

      sbaker-gre

      and

      nasbench

      authored
      21bcc53View commit details

      Copy full SHA for 21bcc53

      View code at this pointBrowse repository at this point
11. Commits on Sep 23, 2026

    • expected_results should be 1 on lolbas detection (#4280)

      Show description for 9640c03
      

      tjgeorgen

      and

      nasbench

      authored
      9640c03View commit details

      Copy full SHA for 9640c03

      View code at this pointBrowse repository at this point
12. Commits on Sep 21, 2026

    • Maybe This is It? (#4279)

      nasbench

      authored
      1a41f94View commit details

      Copy full SHA for 1a41f94

      View code at this pointBrowse repository at this point

    • Tune and Add More Context to Noisy Detections (#4263)

      nasbench

      authored
      1f178cbView commit details

      Copy full SHA for 1f178cb

      View code at this pointBrowse repository at this point

    • macOS detection: Osascript Executing JavaScript Code With Objective-C (#4272)

      Show description for 8fb5650
      

      3 peopleauthored
      8fb5650View commit details

      Copy full SHA for 8fb5650

      View code at this pointBrowse repository at this point

    • macOS detection: Osascript Long Lived Connection To Remote Host (#4270)

      Show description for 840306f
      

      3 peopleauthored
      840306fView commit details

      Copy full SHA for 840306f

      View code at this pointBrowse repository at this point

    • macOS detection: MacOS Osascript Executing Interactive Shell (#4271)

      Show description for 0389108
      

      3 peopleauthored
      0389108View commit details

      Copy full SHA for 0389108

      View code at this pointBrowse repository at this point

    • Update EventID 10 Analytics (#4276)

      nasbench

      authored
      4ad4947View commit details

      Copy full SHA for 4ad4947

      View code at this pointBrowse repository at this point