Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
security_content
Repository navigation
Code
Issues
7
(7)
Pull requests
16
(16)
Discussions
Actions
Projects
Wiki
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
security_content
detections
endpoint
create_remote_thread_in_shell_application.yml
on
develop
User selector
All users
Datepicker
All time
Commit history
Commits on Jul 6, 2026
Remote Thread Analytics Update (#4145)
nasbench
authored
1e6583f
View commit details
Copy full SHA for 1e6583f
View code at this point
Browse repository at this point
Commits on May 13, 2026
Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creat…
Show description for db8c7c8
pyth0n1c
committed
db8c7c8
View commit details
Copy full SHA for db8c7c8
View code at this point
Browse repository at this point
Commits on Apr 17, 2026
updating risk drilldowns (#4016)
Show description for ba59855
patel-bhavin
authored
ba59855
View commit details
Copy full SHA for ba59855
View code at this point
Browse repository at this point
Commits on Mar 10, 2026
ttp_standard_init_score (#3945)
Show description for 2e2f6fc
tccontre
and
t-contreras
authored
2e2f6fc
View commit details
Copy full SHA for 2e2f6fc
View code at this point
Browse repository at this point
Commits on Feb 25, 2026
Add YAML Formatting Job (#3889)
Show description for 11c909f
nasbench
and
patel-bhavin
authored
11c909f
View commit details
Copy full SHA for 11c909f
View code at this point
Browse repository at this point
Commits on Jan 30, 2026
Fix Validation Issues (#3861)
nasbench
authored
f49f3a3
View commit details
Copy full SHA for f49f3a3
View code at this point
Browse repository at this point
Commits on May 2, 2025
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this i…
Show description for d996056
pyth0n1c
committed
d996056
View commit details
Copy full SHA for d996056
View code at this point
Browse repository at this point
Commits on Mar 14, 2025
update versions
Patrick Bareiss
committed
1c9debe
View commit details
Copy full SHA for 1c9debe
View code at this point
Browse repository at this point
Commits on Mar 3, 2025
output normalization endpoint
Patrick Bareiss
committed
5089a7f
View commit details
Copy full SHA for 5089a7f
View code at this point
Browse repository at this point
Commits on Feb 19, 2025
output normalization endpoint
Patrick Bareiss
committed
e0183d3
View commit details
Copy full SHA for e0183d3
View code at this point
Browse repository at this point
Commits on Jan 3, 2025
Finish removing extra fields, or renaming
Show description for fdaa038
pyth0n1c
committed
fdaa038
View commit details
Copy full SHA for fdaa038
View code at this point
Browse repository at this point
Commits on Dec 10, 2024
Merge branch 'develop' into rba_migration
ljstella
committed
6357f18
View commit details
Copy full SHA for 6357f18
View code at this point
Browse repository at this point
Commits on Nov 26, 2024
batch 3
nasbench
committed
369e895
View commit details
Copy full SHA for 369e895
View code at this point
Browse repository at this point
Commits on Nov 15, 2024
endpoint: more typefixes
ljstella
committed
bc14854
View commit details
Copy full SHA for bc14854
View code at this point
Browse repository at this point
endpoint: lowercase rba types
ljstella
committed
c9186e0
View commit details
Copy full SHA for c9186e0
View code at this point
Browse repository at this point
endpoint detection score field rename
ljstella
committed
5141230
View commit details
Copy full SHA for 5141230
View code at this point
Browse repository at this point
endpoint detection score fix
ljstella
committed
f88eb16
View commit details
Copy full SHA for f88eb16
View code at this point
Browse repository at this point
Commits on Nov 14, 2024
endpoint first pass
ljstella
committed
92cc97a
View commit details
Copy full SHA for 92cc97a
View code at this point
Browse repository at this point
Commits on Nov 1, 2024
updating sysmon to XML
research-bot
committed
7eafc7c
View commit details
Copy full SHA for 7eafc7c
View code at this point
Browse repository at this point
Commits on Oct 31, 2024
udpating sysmon source
research-bot
committed
d1c7e1b
View commit details
Copy full SHA for d1c7e1b
View code at this point
Browse repository at this point
Commits on Oct 24, 2024
updating drilldowns
patel-bhavin
committed
0bb378b
View commit details
Copy full SHA for 0bb378b
View code at this point
Browse repository at this point
updating all detections with quotes
patel-bhavin
committed
8b03f3d
View commit details
Copy full SHA for 8b03f3d
View code at this point
Browse repository at this point
updating drilldown_formatting
patel-bhavin
committed
7bc11be
View commit details
Copy full SHA for 7bc11be
View code at this point
Browse repository at this point
remove end hours
patel-bhavin
committed
385ac7a
View commit details
Copy full SHA for 385ac7a
View code at this point
Browse repository at this point
Commits on Sep 30, 2024
adding drilldowns to all
patel-bhavin
committed
cf169b3
View commit details
Copy full SHA for cf169b3
View code at this point
Browse repository at this point
Commits on Jun 26, 2024
Release Branch - ESCU v4.34.0
patel-bhavin
authored and
gowthamarajr
committed
22e5ea3
View commit details
Copy full SHA for 22e5ea3
View code at this point
Browse repository at this point
Commits on May 22, 2024
Release Branch - ESCU v4.32.0
patel-bhavin
authored and
gowthamarajr
committed
6c5446c
View commit details
Copy full SHA for 6c5446c
View code at this point
Browse repository at this point
Commits on Feb 14, 2024
Release v4.24.0
pyth0n1c
authored and
patel-bhavin
committed
9fdf182
View commit details
Copy full SHA for 9fdf182
View code at this point
Browse repository at this point
Commits on Sep 19, 2023
testing a change for sysmon
patel-bhavin
committed
1d35e00
View commit details
Copy full SHA for 1d35e00
View code at this point
Browse repository at this point
Commits on Jul 26, 2023
warzone_rat
tccontre
committed
ace4c91
View commit details
Copy full SHA for ace4c91
View code at this point
Browse repository at this point
Commits on Mar 3, 2023
merged with develop
P4T12ICK
committed
78909f6
View commit details
Copy full SHA for 78909f6
View code at this point
Browse repository at this point
Commits on Jan 9, 2023
updated tags
P4T12ICK
committed
fd0c8b3
View commit details
Copy full SHA for fd0c8b3
View code at this point
Browse repository at this point
Commits on Jan 3, 2023
Migrated all detections to v4
P4T12ICK
committed
5ae53c9
View commit details
Copy full SHA for 5ae53c9
View code at this point
Browse repository at this point
Commits on Oct 28, 2022
qakbot_2
tccontre
committed
0b8adec
View commit details
Copy full SHA for 0b8adec
View code at this point
Browse repository at this point
Commits on Mar 9, 2022
Refactored security content
P4T12ICK
committed
6f0ee68
View commit details
Copy full SHA for 6f0ee68
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.