Skip to content

Content Updates & Fixes - Batch 6.6 - #4251

Merged
nasbench merged 8 commits into
developfrom
fixes-6-6
Sep 4, 2026
Merged

Content Updates & Fixes - Batch 6.6#4251
nasbench merged 8 commits into
developfrom
fixes-6-6

Conversation

@nasbench

@nasbench nasbench commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR updates and fixes some of the following issues:

  • Fix [BUG] Extra Binaries in LOLBAS With Network Traffic #4060 - Split the rule into 2 anomalies to reduce FP and be more manageable.
  • Add missing wildcards to a bunch of detections.
  • Updated Finding/IFs messages and added/fixed some missing threat objects.
  • Updated multiple detections with some additional coverage and quality of life changes

@nasbench nasbench added this to the v6.6.0 milestone Aug 31, 2026
@nasbench nasbench linked an issue Sep 1, 2026 that may be closed by this pull request
Comment thread detections/endpoint/suspicious_wevtutil_usage.yml
@nasbench
nasbench marked this pull request as ready for review September 4, 2026 12:03
@nasbench
nasbench merged commit 9b137ce into develop Sep 4, 2026
6 checks passed
@nasbench
nasbench deleted the fixes-6-6 branch September 4, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG] Extra Binaries in LOLBAS With Network Traffic

2 participants