Commits

Commits on Sep 29, 2026

improve format for attack data links so (#4299)
pyth0n1c
authored
cc18903
O365 message trace detections: support o365:graph:messagetrace (Office 365 add-on 6.x) (#4286)

sbaker-gre
and
nasbench
authored
9aff0d8
Windows Crowdstrike RTR Script Execution: match EDR sources without a parent command line (#4294)

sbaker-gre
and
nasbench
authored
21bcc53

Commits on Sep 24, 2026

Azure AD consent detections: repair Scope regex broken by a line wrap (#4291)

sbaker-gre
and
nasbench
authored
64acde7

Commits on Sep 23, 2026

expected_results should be 1 on lolbas detection (#4280)

tjgeorgen
and
nasbench
authored
9640c03
Update Goolge Cloud TA (#4284)
pyth0n1c
authored
aea632a

Commits on Sep 21, 2026

Maybe This is It? (#4279)
nasbench
authored
1a41f94
Fix Typo (#4278)
nasbench
authored
424a788
Tune and Add More Context to Noisy Detections (#4263)
nasbench
authored
1f178cb
Bump contentctl.yml and build.yml to 6.7.0 (#4277)
nasbench
authored
a45339f
macOS detection: Osascript Executing JavaScript Code With Objective-C (#4272)

authored
8fb5650
macOS detection: Osascript Long Lived Connection To Remote Host (#4270)

authored
840306f
macOS detection: MacOS Osascript Executing Interactive Shell (#4271)

authored
0389108
Update EventID 10 Analytics (#4276)
nasbench
authored
4ad4947
Add Some Missing Threat Objects & References (#4262)

nasbench
and
onurmerdogan
authored
da1d611
Multiple Detections Against Recent ClickFix Campaigns (#4269)

onurmerdogan
and
nasbench
authored
790ce0a

Commits on Sep 18, 2026

Deprecate macos reopened applications (#4273)

RavenTait
and
nasbench
authored
7b6385a
Update data source TA and install.yml app versions (#4274)
pyth0n1c
authored
2216f46

Commits on Sep 8, 2026

Detection Against Content Copied From Browsers Executed through Run (#4261)
onurmerdogan
authored
4cd62e8

Commits on Sep 7, 2026

Batch fixes from code review (#4260)
rviskova13
authored
5b9754b
Batch Fixes from Code Review (#4259)
onurmerdogan
authored
855be18
Add Socat Utility Detections (#4253)

authored
225e705

Commits on Sep 6, 2026

macOS detection: MacOS Osascript Displaying Suspicious User Prompt (#4250)

authored
4265636
Add Coverage For CVE-2026-47301 (#4236)

authored
aaf2ed2

Commits on Sep 5, 2026

Commits on Sep 4, 2026

Minor Fixes Against False Positive Patterns (#4249)

onurmerdogan
and
nasbench
authored
e86ae0f
Content Updates & Fixes - Batch 6.6 (#4251)
nasbench
authored
9b137ce

Commits on Sep 3, 2026

Add NIST RMF Dashboard [Alpha] (#4254)
nasbench
authored
ecb99de
Update data source TA and install.yml app versions (#4255)

pyth0n1c
and
patel-bhavin
authored
da62dd8

Commits on Sep 1, 2026

Update data source TA and install.yml app versions (#4252)

pyth0n1c
and
patel-bhavin
authored
ad15a0a

Commits on Aug 31, 2026

Fix original_file_name field typo in whoami and arp discovery detections (#4245)

munzzyy
and
nasbench
authored
6e80f29
Update data source TA and install.yml app versions (#4246)

pyth0n1c
and
patel-bhavin
authored
58f87eb

Commits on Aug 27, 2026

chore: bump contentctl.yml and build.yml to 6.6.0 (#4240)

authored
1e23c3e
Update data source TA and install.yml app versions (#4235)

authored
870240c