Attributed metadata history
Up to 100 retained publisher events per page for 19e8342c91ad26349fe227928a0a40254344b3321c8ed91b8ec0f576aadcfbc0. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_457d9a43f60e7e15d0
observed · 2026-10-12 09:23:03 UTC
🚀 Key Highlights ESCU 6.0.0 is a major release that includes a number of changes for better alignment with Enterprise Security v8.x+ features. Please note that all content has been updated in this release, resulting in cleaner, more readable .conf files. 🔍Expanded Finding and Intermediate Finding Support 🔎 Detections that previously created Notable Events, and then Findings with a 0 score “N/A” entity will now create a Finding with an appropriately tagged entity from the search results, with the score that previously would have been used for a risk event/Intermediate Finding for that entity. Because of the shift to tagging entities to Findings, fewer total Intermediate Findings may be created for some detections, as we won’t be separately creating Intermediate Findings for every entity. 🗓️ Increased Clarity on Content Creation Date vs Modification Date 🗓️ Detections, Analytic Stories, and other things, depending on where you view them now have both creation and modification dates indicating when we first created them and when we’ve last modified them. 🛠️ Repository Tooling Updates 🛠️ ESCU v6.0 marks the transition away from contentctl. We are sh
Fingerprint: 189f72153d76fae66b8b1a4517593b1a896c28402a6956aa970f5d7116887b78
intelligence_src_457d9a43f60e7e15d0
observed · 2026-10-12 09:23:03 UTC
available
Fingerprint: 46a79d93330609014f09d35b0d753a3dee278bd71aaea4321313d2ee9c64a43c