Issues

• Splunk Add-on for Sysmon for Linux is archived on Splunkbase

  splunk/security_content#4306 · Filter by author github-actions opened on Oct 1, 2026
  1

  

• [BUG] AWS CreateAccessKey: unquoted field names make the cross-user filter a no-op (fires on self-key creation)

  bug
  splunk/security_content#4292 · Filter by author vshcherbakov opened on Sep 25, 2026 · v6.9.0
  1

  

• feat: Dual-signal SnortML (GID 411) + signature/EVE corroboration analytics for Cisco Secure Firewall

  splunk/security_content#4220 · Filter by author AAH20 opened on Aug 16, 2026
  2

• Suggested Enhancement for Detection: Windows AD Short Lived Domain Account ServicePrincipalName

  enhancement
  Feature

  splunk/security_content#3941 · Filter by author Jannik1228 opened on Mar 6, 2026
  

• Suggested Enhancement for ESCU Detection: Internal Horizontal Port Scan NMAP Top 20

  enhancement
  Feature

  splunk/security_content#3604 · Filter by author thegreatmhn opened on Jul 12, 2025
  3

• [BUG] ESCU CS fields LogonType and TargetUserName

  bug
  Bug

  splunk/security_content#2869 · Filter by author cp-sn opened on Oct 2, 2023
  3