Search results

[BUG]Bypass: permission_modification_using_takeown_app analytic misses /F switch due to case-sensitive matching

bugSomething isn't working Something isn't working

Status: Open.

Bug

#3885 In splunk/security_content;

· thegreatmhn opened on Feb 1, 2026

[BUG] ESCU - Outbound Network Connection from Java Using Default Ports - Rule

bugSomething isn't working Something isn't working

Status: Open.

Bug

#3751 In splunk/security_content;

· thegreatmhn opened on Nov 3, 2025

[BUG] process_rundll32 macro looks for rundll32.exe OR RUNDLL32.EXE.

bugSomething isn't working Something isn't working

Status: Open.

Bug

#3716 In splunk/security_content;

· vignesh-splk opened on Oct 9, 2025

Suggested Enhancement for ESCU Detection: Internal Horizontal Port Scan NMAP Top 20

enhancementNew feature or request New feature or request

Status: Open.

Feature

#3604 In splunk/security_content;

· thegreatmhn opened on Jul 12, 2025

[BUG] Kerberos Pre-Authentication Flag Disabled in UserAccountControl

bugSomething isn't working Something isn't working

Status: Open.

Bug

#3566 In splunk/security_content;

· ljstella opened on Jun 17, 2025

pre trained Deep Learning models for ESCU - Support for DSDL Version 5.1.1

enhancementNew feature or request New feature or request

Status: Open.

Feature

#2939 In splunk/security_content;

· atgithub11 opened on Jan 9, 2024

[BUG] ESCU CS fields LogonType and TargetUserName

bugSomething isn't working Something isn't working

Status: Open.

Bug

#2869 In splunk/security_content;

· cp-sn opened on Oct 2, 2023