Commits

Commit history

1. Commits on Oct 30, 2026

   • abnormal_security: collect threat remediation and case updates (#22195)

     Show description for d8d0135
     marc-gr

     authored
     d8d0135View commit details

     Copy full SHA for d8d0135

     Browse repository at this point

   • jamf_pro: remove non-ECS host.address field (#22197)

     Show description for daa01d5
     marc-gr

     authored
     daa01d5View commit details

     Copy full SHA for daa01d5

     Browse repository at this point
2. Commits on Sep 14, 2026

   • [system] Populate event.action for Linux IAM auth events and sudo systemctl (#21042)

     Show description for 0be82f4
     marc-gr

     authored
     0be82f4View commit details

     Copy full SHA for 0be82f4

     Browse repository at this point

   • windows: consolidate duplicated winlog assets into _dev/shared via links (#20181)

     Show description for ff53281
     marc-gr

     authored
     ff53281View commit details

     Copy full SHA for ff53281

     Browse repository at this point
3. Commits on Sep 3, 2026

   • [greenhouse] Drop scalar performer.meta values that conflict with object mapping (#21012)

     Show description for a57470c
     marc-gr

     authored
     a57470cView commit details

     Copy full SHA for a57470c

     Browse repository at this point
4. Commits on Sep 2, 2026

   • [osquery_manager] Upgrade osquery schema to 5.23.1 (#20775)

     Show description for 1f6a106
     marc-gr

     authored
     1f6a106View commit details

     Copy full SHA for 1f6a106

     Browse repository at this point

   • [system] Add event 6272 Subject mappings (#18697)

     Show description for 59aa0e9
     

     marc-gr

     and

     ricardoamaro

     authored
     59aa0e9View commit details

     Copy full SHA for 59aa0e9

     Browse repository at this point
5. Commits on Aug 25, 2026

   • [windows] Fix Sysmon Event ID 7 pipeline failure when dll.code_signature is missing (#20796)

     Show description for f887e5e
     marc-gr

     authored
     f887e5eView commit details

     Copy full SHA for f887e5e

     Browse repository at this point
6. Commits on Jul 21, 2026

   • [osquery_manager] Refine query profiles dashboard (#20228)

     Show description for f5f136e
     marc-gr

     authored
     f5f136eView commit details

     Copy full SHA for f5f136e

     Browse repository at this point
7. Commits on Jul 16, 2026

   • [osquery_manager] Add `query_profile` data stream (#18608)

     Show description for 03659d7
     marc-gr

     authored
     03659d7View commit details

     Copy full SHA for 03659d7

     Browse repository at this point
8. Commits on Jul 13, 2026

   • [Osquery_manager] Add pack_name and query_name fields for scheduled queries (#20017)

     Show description for bb84bfc
     marc-gr

     authored
     bb84bfcView commit details

     Copy full SHA for bb84bfc

     Browse repository at this point
9. Commits on May 28, 2026

   • osquery_manager: generate ECS section mappings from config (#18989)

     Show description for 7000d19
     marc-gr

     authored
     7000d19View commit details

     Copy full SHA for 7000d19

     Browse repository at this point
10. Commits on Apr 28, 2026

    • FIx pipeline to set file hash for event 26 (#18501)

      marc-gr

      authored
      0e84135View commit details

      Copy full SHA for 0e84135

      Browse repository at this point
11. Commits on Apr 24, 2026

    • [winlog] Expose forwarded option in winlog (#18500)

      Show description for 37a57bf
      marc-gr

      authored
      37a57bfView commit details

      Copy full SHA for 37a57bf

      Browse repository at this point
12. Commits on Apr 16, 2026

    • [fim] Add etw backend to fim (#18420)

      Show description for fbeb099
      marc-gr

      authored
      fbeb099View commit details

      Copy full SHA for fbeb099

      Browse repository at this point
13. Commits on Apr 9, 2026

    • osquery_manager 1.26.0: osquery 5.22.1, Kibana ^9.4.0, osquery-gen beats tag/branch (#18305)

      Show description for c466d6c
      marc-gr

      authored
      c466d6cView commit details

      Copy full SHA for c466d6c

      Browse repository at this point
14. Commits on Mar 30, 2026

    • Windows/System security: process.args_count (4688), 5136 event.reason & ObjectDN (#17921)

      Show description for 0a5f0a0
      marc-gr

      authored
      0a5f0a0View commit details

      Copy full SHA for 0a5f0a0

      Browse repository at this point

    • Input packages: dataset var and dotted index patterns (#17924)

      Show description for c2f386e
      marc-gr

      authored
      c2f386eView commit details

      Copy full SHA for c2f386e

      Browse repository at this point

    • feat(windows,system): populate registry.path for Security registry events (#17931)

      Show description for 4ea6c52
      marc-gr

      authored
      4ea6c52View commit details

      Copy full SHA for 4ea6c52

      Browse repository at this point
15. Commits on Mar 24, 2026

    • feat(osquery_manager): emit schemas/metadata.json from osquery-gen (#17999)

      Show description for 542c78c
      marc-gr

      authored
      542c78cView commit details

      Copy full SHA for 542c78c

      Browse repository at this point
16. Commits on Mar 23, 2026

    • feat(osquery_manager): add config-driven osquery schema generator under _dev/scripts (#17781)

      Show description for 96a877c
      marc-gr

      authored
      96a877cView commit details

      Copy full SHA for 96a877c

      Browse repository at this point
17. Commits on Mar 20, 2026

    • feat(macos): GA release, rename to macOS Security Events (#17903)

      Show description for e5b6ee9
      marc-gr

      authored
      e5b6ee9View commit details

      Copy full SHA for e5b6ee9

      Browse repository at this point

    • fix(microsoft_exchange_server): use unique policy test names per data stream to fix flaky test (#17901)

      Show description for 2248473
      marc-gr

      authored
      2248473View commit details

      Copy full SHA for 2248473

      Browse repository at this point
18. Commits on Mar 16, 2026

    • osquery_manager: add new fields related to the osquery manager schedules (#17340)

      Show description for bd4568a
      

      marc-gr

      and

      tomsonpl

      authored
      bd4568aView commit details

      Copy full SHA for bd4568a

      Browse repository at this point
19. Commits on Dec 15, 2025

    • Upgrade osquery to 5.19.0 (#16509)

      marc-gr

      authored
      0b9011aView commit details

      Copy full SHA for 0b9011a

      Browse repository at this point
20. Commits on Oct 28, 2025

    • [osquery_manager] Add root requirement (#15781)

      Show description for 51bf075
      marc-gr

      authored
      51bf075View commit details

      Copy full SHA for 51bf075

      Browse repository at this point
21. Commits on Sep 17, 2025

    • [osquery_manager] Update osquery to version 5.18.1 (#15321)

      Show description for 35dbdae
      marc-gr

      authored
      35dbdaeView commit details

      Copy full SHA for 35dbdae

      Browse repository at this point
22. Commits on Aug 21, 2025

    • Support ISO8601 date format in security data stream pipeline. (#14795)

      marc-gr

      authored
      c96823fView commit details

      Copy full SHA for c96823f

      Browse repository at this point

    • Only try to extract extension when there is a dot in the file name in defender data stream. (#14891)

      marc-gr

      authored
      130ffe1View commit details

      Copy full SHA for 130ffe1

      Browse repository at this point

    • [microsoft_dnsserver] Adapt to support new ETW events. (#14672)

      Show description for f8bc880
      marc-gr

      authored
      f8bc880View commit details

      Copy full SHA for f8bc880

      Browse repository at this point
23. Commits on Jul 8, 2025

    • Make several windows package fixes (#14435)

      marc-gr

      authored
      9e95dfeView commit details

      Copy full SHA for 9e95dfe

      Browse repository at this point
24. Commits on Jul 2, 2025

    • Make windows_etw ga (#13492)

      marc-gr

      authored
      88f4e19View commit details

      Copy full SHA for 88f4e19

      Browse repository at this point
25. Commits on Apr 25, 2025

    • Handle events without event_data properly (#13571)

      marc-gr

      authored
      451750aView commit details

      Copy full SHA for 451750a

      Browse repository at this point
26. Commits on Apr 16, 2025

    • [system,windows] Fix security pipeline and powershell dashboard (#13546)

      Show description for 69c7508
      marc-gr

      authored
      69c7508View commit details

      Copy full SHA for 69c7508

      Browse repository at this point
27. Commits on Apr 14, 2025

    • Fix dashboard filters (#13532)

      marc-gr

      authored
      820f2caView commit details

      Copy full SHA for 820f2ca

      Browse repository at this point