Commits

Commit history

1. Commits on Apr 2, 2026

   • Tagged Analytics Covering the Axios Compromise Post-Exploitation Activity (#3982)

     Show description for 7293d75
     

     tccontre

     and

     nasbench

     authored
     7293d75View commit details

     Copy full SHA for 7293d75

     View code at this pointBrowse repository at this point

   • Add Filter for VMware Tools (#3983)

     RavenTait

     authored
     f416da5View commit details

     Copy full SHA for f416da5

     View code at this pointBrowse repository at this point

   • Bump contentctl.yml to 5.26.0 (#3989)

     Show description for 8c6453e
     

     3 peopleauthored
     8c6453eView commit details

     Copy full SHA for 8c6453e

     View code at this pointBrowse repository at this point
2. Commits on Mar 31, 2026

   • Fix Broken RBA Message (#3984)

     nasbench

     authored
     fd53a21View commit details

     Copy full SHA for fd53a21

     View code at this pointBrowse repository at this point
3. Commits on Mar 30, 2026

   • First pass of RBA message fix

     ljstella

     committed
     d38d8e1View commit details

     Copy full SHA for d38d8e1

     View code at this pointBrowse repository at this point

   • gh0st (#3973)

     Show description for ff78e2d
     

     3 peopleauthored
     ff78e2dView commit details

     Copy full SHA for ff78e2d

     View code at this pointBrowse repository at this point

   • Fix Reported Issues - April Batch (#3962)

     Show description for bc1b413
     

     nasbench

     and

     patel-bhavin

     authored
     bc1b413View commit details

     Copy full SHA for bc1b413

     View code at this pointBrowse repository at this point
4. Commits on Mar 28, 2026

   • Update Suricata TA and Related Analytics (#3974)

     Show description for b87507b
     

     nasbench

     and

     ljstella

     authored
     b87507bView commit details

     Copy full SHA for b87507b

     View code at this pointBrowse repository at this point
5. Commits on Mar 27, 2026

   • Tune detections based on Athena FPs (#3972)

     Show description for 89391cf
     

     3 peopleauthored
     89391cfView commit details

     Copy full SHA for 89391cf

     View code at this pointBrowse repository at this point

   • Update ryuk_wake_on_lan_command.yml

     nasbench

     committed
     30e0c54View commit details

     Copy full SHA for 30e0c54

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     44f3125View commit details

     Copy full SHA for 44f3125

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     0b219a6View commit details

     Copy full SHA for 0b219a6

     View code at this pointBrowse repository at this point

   • changed back to Anomaly

     

     P4T12ICK

     committed
     8be3693View commit details

     Copy full SHA for 8be3693

     View code at this pointBrowse repository at this point

   • updated suggestions

     

     P4T12ICK

     committed
     c40b390View commit details

     Copy full SHA for c40b390

     View code at this pointBrowse repository at this point
6. Commits on Mar 26, 2026

   • Update detections/endpoint/windows_account_access_removal_via_logoff_exec.yml

     Show description for b4c002e
     

     P4T12ICK

     and

     nasbench

     authored
     b4c002eView commit details

     Copy full SHA for b4c002e

     View code at this pointBrowse repository at this point

   • Update detections/endpoint/windows_application_whitelisting_bypass_attempt_via_rundll32.yml

     Show description for 3c1d41e
     

     P4T12ICK

     and

     nasbench

     authored
     3c1d41eView commit details

     Copy full SHA for 3c1d41e

     View code at this pointBrowse repository at this point

   • Update detections/endpoint/system_user_discovery_with_whoami.yml

     Show description for 4912e09
     

     P4T12ICK

     and

     nasbench

     authored
     4912e09View commit details

     Copy full SHA for 4912e09

     View code at this pointBrowse repository at this point

   • Update detections/endpoint/conti_common_exec_parameter.yml

     Show description for b4c800d
     

     P4T12ICK

     and

     nasbench

     authored
     b4c800dView commit details

     Copy full SHA for b4c800d

     View code at this pointBrowse repository at this point

   • Update detections/endpoint/anomalous_usage_of_7zip.yml

     Show description for 6d5d970
     

     P4T12ICK

     and

     nasbench

     authored
     6d5d970View commit details

     Copy full SHA for 6d5d970

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     520bfc0View commit details

     Copy full SHA for 520bfc0

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     dc3f50bView commit details

     Copy full SHA for dc3f50b

     View code at this pointBrowse repository at this point

   • bug fixes

     

     P4T12ICK

     committed
     106a9baView commit details

     Copy full SHA for 106a9ba

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     fee2237View commit details

     Copy full SHA for fee2237

     View code at this pointBrowse repository at this point

   • bumped version numbers and dates

     

     P4T12ICK

     committed
     90efd9aView commit details

     Copy full SHA for 90efd9a

     View code at this pointBrowse repository at this point

   • bug fix

     

     P4T12ICK

     committed
     1e00962View commit details

     Copy full SHA for 1e00962

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into detections_improvement

     P4T12ICK

     authored
     eb0cb46View commit details

     Copy full SHA for eb0cb46

     View code at this pointBrowse repository at this point

   • Improved detections based on telemetry.

     

     P4T12ICK

     committed
     e556cacView commit details

     Copy full SHA for e556cac

     View code at this pointBrowse repository at this point
7. Commits on Mar 23, 2026

   • Add Tagging and Analytic Story for Void Manticore (#3959)

     Show description for 697a77c
     

     3 peopleauthored
     697a77cView commit details

     Copy full SHA for 697a77c

     View code at this pointBrowse repository at this point

   • Tweaking attack_data links (#3966)

     Show description for 0f08a8b
     

     ljstella

     and

     patel-bhavin

     authored
     0f08a8bView commit details

     Copy full SHA for 0f08a8b

     View code at this pointBrowse repository at this point
8. Commits on Mar 17, 2026

   • Test- Integration failure fixes (#3960)

     Show description for 709e57e
     patel-bhavin

     authored
     709e57eView commit details

     Copy full SHA for 709e57e

     View code at this pointBrowse repository at this point
9. Commits on Mar 16, 2026

   • Add BlankGrabber Stealer Related Analytics and Tagging (#3943)

     Show description for 27aeb7d
     

     4 peopleauthored
     27aeb7dView commit details

     Copy full SHA for 27aeb7d

     View code at this pointBrowse repository at this point

   • Fix Issue #3950 (#3957)

     Show description for 9c7ef33
     

     3 peopleauthored
     9c7ef33View commit details

     Copy full SHA for 9c7ef33

     View code at this pointBrowse repository at this point

   • Fix ` Windows AD Domain Replication ACL Addition` (#3958)

     Show description for 98ef843
     

     patel-bhavin

     and

     nasbench

     authored
     98ef843View commit details

     Copy full SHA for 98ef843

     View code at this pointBrowse repository at this point

   • Add Lotus Blossom Related Analytics and Tagging (#3953)

     Show description for 4aeba4c
     

     3 peopleauthored
     4aeba4cView commit details

     Copy full SHA for 4aeba4c

     View code at this pointBrowse repository at this point

   • Deprecate MLTK detections (#3922)

     Show description for b3fed38
     

     3 peopleauthored
     b3fed38View commit details

     Copy full SHA for b3fed38

     View code at this pointBrowse repository at this point