Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on Dec 8, 2025

• Removed erroneous `at_least_one` constraint in `Live Evidence Info` class (#1537)

  Show description for d8f787f
  

  mlmitch

  and

  floydtree

  authored
  d8f787f

  Copy full SHA for d8f787f

Commits on Nov 21, 2025

• Updated the MITRE ATT&CK Matrix URL as it has changed. (#1539)

  Show description for 3ddb064
  pagbabian-splunk

  authored
  3ddb064

  Copy full SHA for 3ddb064

Commits on Nov 15, 2025

• Updating main branch to v1.8.0-dev (#1534)

  Show description for c833399
  floydtree

  authored
  c833399

  Copy full SHA for c833399

Commits on Nov 14, 2025

• v1.7.0 Release Prep (#1533)

  Show description for dc6359b
  floydtree

  authored
  dc6359b

  Copy full SHA for dc6359b

Commits on Nov 13, 2025

• Issue-1518: Add aggregation models to network traffic object (#1529)

  Show description for 714896f
  Aniak5

  authored
  714896f

  Copy full SHA for 714896f

• Added missing attribute metadata (#1531)

  Show description for 62d6fcf
  mlmitch

  authored
  62d6fcf

  Copy full SHA for 62d6fcf

Commits on Nov 12, 2025

• Cross reference between `process` and `win_service` objects. (#1526)

  Show description for 8f40451
  

  3 peopleauthored
  8f40451

  Copy full SHA for 8f40451

• Added WindowsFilteringPlatform related objects as available TypeIds for WindowsResource (#1530)

  Show description for bc09a95
  

  3 peopleauthored
  bc09a95

  Copy full SHA for bc09a95

Commits on Nov 11, 2025

• Added source and type to the metadata object. Updated the log_* attributes and descriptions for consistency. (#1483)

  Show description for 23c7029
  

  pagbabian-splunk

  and

  floydtree

  authored
  23c7029

  Copy full SHA for 23c7029

Commits on Nov 4, 2025

• Add `launch_type_id` and `launch_type` attributes to `Process Activity`. (#1517)

  Show description for bcc68cd
  

  davemcatcisco

  and

  floydtree

  authored
  bcc68cd

  Copy full SHA for bcc68cd

• Description cleanup for cloud, resource_details objects (#1522)

  Show description for 7ecced5
  floydtree

  authored
  7ecced5

  Copy full SHA for 7ecced5

• Add new values to `state_id` for `digital_signature` object. (#1520)

  Show description for f200004
  

  davemcatcisco

  and

  floydtree

  authored
  f200004

  Copy full SHA for f200004

Commits on Oct 28, 2025

• Add `org` to `reporter` object (#1507)

  Show description for 1c38564
  

  3 peopleauthored
  1c38564

  Copy full SHA for 1c38564

• New `Module Activity: Invoke` event `activity_id` (#1497)

  Show description for 90e922d
  mlmitch

  authored
  90e922d

  Copy full SHA for 90e922d

Commits on Oct 17, 2025

• Modify constraints for the `name` and `uid` attributes of `extension` object (#1511)

  Show description for 9dc3316
  

  s-Fl

  and

  floydtree

  authored
  9dc3316

  Copy full SHA for 9dc3316

Commits on Oct 14, 2025

• Relax `file` requirement in `job` object (#1509)

  Show description for 706ac2a
  mlmitch

  authored
  706ac2a

  Copy full SHA for 706ac2a

Commits on Oct 9, 2025

• Fix up 1.7.0-dev CHANGELOG (#1506)

  Show description for e4fbc48
  mikeradka

  authored
  e4fbc48

  Copy full SHA for e4fbc48

Commits on Oct 8, 2025

• Set network endpoint uid as an observable (#1502)

  Show description for 21bd368
  

  ram-parth

  and

  floydtree

  authored
  21bd368

  Copy full SHA for 21bd368

Commits on Oct 7, 2025

• Add event_uid to the observable object (#1503)

  zschmerber

  authored
  93a45d1

  Copy full SHA for 93a45d1

Commits on Oct 3, 2025

• Add `network_scope` attribute to `network_endpoint` and `observation_point` attribute to the base network event class (#1481)

  Show description for 8c5c44d
  

  Aniak5

  and

  floydtree

  authored
  8c5c44d

  Copy full SHA for 8c5c44d

• Add `reporter` object (#1476)

  Show description for 4b559ea
  

  mikeradka

  and

  floydtree

  authored
  4b559ea

  Copy full SHA for 4b559ea

Commits on Sep 26, 2025

• Added Atom (38) as an available WindowsResource type_id (#1482)

  Show description for ba9ac5c
  

  andymbwu

  and

  floydtree

  authored
  ba9ac5c

  Copy full SHA for ba9ac5c

Commits on Sep 23, 2025

• Updated the description of observable.name to support array names. (#1493)

  Show description for 58e1406
  

  pagbabian-splunk

  and

  floydtree

  authored
  58e1406

  Copy full SHA for 58e1406

Commits on Sep 18, 2025

• Correct the since deprecation flag for Web Resource Access Activity (#1492)

  Show description for 0fa503c
  mikeradka

  authored
  0fa503c

  Copy full SHA for 0fa503c

Commits on Sep 3, 2025

• Correct the peripheral_device.type_id enum values (#1485)

  Show description for ac1438e
  mikeradka

  authored
  ac1438e

  Copy full SHA for ac1438e

Commits on Aug 26, 2025

• Add a `Peripheral Activity` Class (#1471)

  Show description for b3cd361
  

  3 peopleauthored
  b3cd361

  Copy full SHA for b3cd361

• Added `auth_factors` as an attribute to the `Account Change` class. (#1455)

  Show description for db9cf4d
  

  max-power15

  and

  mikeradka

  authored
  db9cf4d

  Copy full SHA for db9cf4d

Commits on Aug 13, 2025

• Add `Local (4)` enum to `direction_id` Attribute (#1475)

  Show description for 2ece8a4
  mikeradka

  authored
  2ece8a4

  Copy full SHA for 2ece8a4

Commits on Aug 1, 2025

• v1.6.0 release prep (#1473)

  Show description for 32de09a
  floydtree

  authored
  32de09a

  Copy full SHA for 32de09a

• Added type-specific attributes to represent Windows registry value data. (#1468)

  Show description for 3f52c6f
  

  davemcatcisco

  and

  mikeradka

  authored
  3f52c6f

  Copy full SHA for 3f52c6f

Commits on Jul 25, 2025

• issue-1457: Improve clarity on which network endpoint initiated flow (#1464)

  Show description for 9efa427
  

  Aniak5

  and

  floydtree

  authored
  9efa427

  Copy full SHA for 9efa427

• Adding open_ports to the network_interface object (#1466)

  Show description for 051df78
  floydtree

  authored
  051df78

  Copy full SHA for 051df78

• 07/2025 D3FEND mappings pass (#1459)

  Show description for 95defdd
  

  3 peopleauthored
  95defdd

  Copy full SHA for 95defdd

• IAM Analysis Finding - A new event class. (#1389)

  Show description for 0a1d8b4
  floydtree

  authored
  0a1d8b4

  Copy full SHA for 0a1d8b4

Commits on Jul 23, 2025

• Add Account Switch activity id to Authentication Class (#1460)

  Show description for f62c59f
  rebeccasenger

  authored
  f62c59f

  Copy full SHA for f62c59f

Pagination

Previous

Next