Search results

[BUG] Logic Problem of Process Creating LNK file in Suspicious Location scenario

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3828 In splunk/security_content;

· thegreatmhn opened on Dec 10, 2025

[BUG] Noisy Filter in Windows Registry Delete Task SD

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3812 In splunk/security_content;

· thegreatmhn opened on Dec 1, 2025

Improving Performance of Detection Rules That Are Using Broad tstats Filters

bugSomething isn't workingSomething isn't working

enhancementNew feature or requestNew feature or request

Status: Open.

#3809 In splunk/security_content;

· a5hk opened on Nov 27, 2025

Overlap Between “Executables Or Script Creation In Temp Path” and “Executables Or Script Creation In Suspicious Path”

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3805 In splunk/security_content;

· thegreatmhn opened on Nov 25, 2025

[BUG] ESCU - Suspicious Curl Network Connection issue

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3796 In splunk/security_content;

· JacobOstler opened on Nov 19, 2025

[BUG] Discrepancy for parameters with JSON values

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3769 In splunk/security_content;

· AndreiBanaru opened on Nov 10, 2025

[BUG] ESCU - Outbound Network Connection from Java Using Default Ports - Rule

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3751 In splunk/security_content;

· thegreatmhn opened on Nov 3, 2025

[BUG] process_rundll32 macro looks for rundll32.exe OR RUNDLL32.EXE.

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3716 In splunk/security_content;

· vignesh-splk opened on Oct 9, 2025

Suggested Enhancement for ESCU Detection: Internal Horizontal Port Scan NMAP Top 20

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#3604 In splunk/security_content;

· thegreatmhn opened on Jul 12, 2025

[BUG] Kerberos Pre-Authentication Flag Disabled in UserAccountControl

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#3566 In splunk/security_content;

· ljstella opened on Jun 17, 2025

pre trained Deep Learning models for ESCU - Support for DSDL Version 5.1.1

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#2939 In splunk/security_content;

· atgithub11 opened on Jan 9, 2024

[BUG] ESCU CS fields LogonType and TargetUserName

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#2869 In splunk/security_content;

· cp-sn opened on Oct 2, 2023