Issues

• Splunk Add-on for Sysmon for Linux is archived on Splunkbase

  splunk/security_content#4306 · Filter by author github-actions opened on Oct 1, 2026
  

• DEPRECATED Add-on for Cisco Network Data is archived on Splunkbase

  splunk/security_content#4305 · Filter by author github-actions opened on Oct 1, 2026 · v6.9.0
  

• App for CircleCI is archived on Splunkbase

  splunk/security_content#4304 · Filter by author github-actions opened on Oct 1, 2026 · v6.9.0
  

• [BUG] Detect New Open S3 Buckets over AWS CLI: operator precedence makes it fire on any aws-cli PutBucketAcl (incl. private ACLs); canned public-read missed when alone in the window

  bug
  splunk/security_content#4293 · Filter by author vshcherbakov opened on Sep 25, 2026 · v6.9.0
  1

  

• [BUG] AWS CreateAccessKey: unquoted field names make the cross-user filter a no-op (fires on self-key creation)

  bug
  splunk/security_content#4292 · Filter by author vshcherbakov opened on Sep 25, 2026 · v6.9.0
  1

  

• Duplicate *http* Pattern in Windows Ngrok Reverse Proxy Usage Detection

  bug
  splunk/security_content#4275 · Filter by author 0x4D6174696E opened on Sep 19, 2026 · v6.9.0
  1

  

• Lookup replication issue with DA-ESS-ContentUpdate on distributed search

  splunk/security_content#4229 · Filter by author Masoud00013 opened on Aug 22, 2026 · v6.8.0
  4

• feat: Dual-signal SnortML (GID 411) + signature/EVE corroboration analytics for Cisco Secure Firewall

  splunk/security_content#4220 · Filter by author AAH20 opened on Aug 16, 2026
  2

• Suggested Enhancement for Detection: Windows AD Short Lived Domain Account ServicePrincipalName

  enhancement
  Feature

  splunk/security_content#3941 · Filter by author Jannik1228 opened on Mar 6, 2026
  

• Suggested Enhancement for ESCU Detection: Internal Horizontal Port Scan NMAP Top 20

  enhancement
  Feature

  splunk/security_content#3604 · Filter by author thegreatmhn opened on Jul 12, 2025
  3

• [BUG] ESCU CS fields LogonType and TargetUserName

  bug
  Bug

  splunk/security_content#2869 · Filter by author cp-sn opened on Oct 2, 2023
  3