v6.10.0

New issue

Open

Due by November 4, 2026

•Last updated Oct 30, 2026

11% complete

Detection: Azure AD Suspicious Device Registration
Unread
#4339 opened Oct 12, 2026 · Updated Oct 22, 2026
6
Add DNS PTR-Based Host Discovery Detection
Unread
#4332 opened Oct 10, 2026 · Updated Oct 29, 2026
17
Detect net.exe from non-shell parents and exclude net.exe as a net1 parent
Unread
#4336 opened Oct 12, 2026 · Updated Oct 22, 2026
[BUG] Improve net.exe and net1.exe Detection Logic in Windows Cmdline Tool Execution From Non-Shell Process
Bug
splunk/security_content#4334 · opened on Oct 11, 2026 · v6.10.0
1
Add Azure AD Entra ID identity attack detections (3 analytics)
Unread
#4091 opened May 20, 2026 · Updated Oct 22, 2026
23
Update Data Source Objects Fields and Example Logs
Unread
#4342 opened Oct 14, 2026 · Updated Oct 23, 2026
2
Add MCP file deletion and webhook creation detections to Suspicious MCP Activities
Unread
#4128 opened Jun 15, 2026 · Updated Oct 27, 2026
11
New Detections targeting Browser Hijacker Campaign
Unread
#4352 opened Oct 19, 2026 · Updated Oct 29, 2026
4
Vghost CVE-2026-74580
Unread
#4357 opened Oct 20, 2026 · Updated Oct 22, 2026
3
Small fixes for PHP2Shell related rules
Unread
#4372 opened Oct 28, 2026 · Updated Oct 30, 2026
Updates for Node2shell
Unread
#4371 opened Oct 28, 2026 · Updated Oct 28, 2026
5
Expand Windows remote management spawned process detection
Unread
#4366 opened Oct 27, 2026 · Updated Oct 30, 2026
10
Php2Shell Segmentation Fault Errors Correlated with Access Logs
Unread
#4373 opened Oct 28, 2026 · Updated Oct 29, 2026
5
php2shell auditd detections
Unread
#4376 opened Oct 29, 2026 · Updated Oct 30, 2026
10
[BUG] Web or Application Server Spawning a Shell: add MSExchangeHMWorker.exe
Bug
splunk/security_content#4375 · opened on Oct 29, 2026 · v6.10.0
1

Issues