https://detectionascode.com/changelog Capability matrix and head-to-heads for detection engineering tools, scored from public documentation, with rule health scored as its own group. en Wed, 04 Nov 2026 09:00:00 GMT https://detectionascode.com/changelog/soc-prime-news-listing https://detectionascode.com/changelog/soc-prime-news-listing Tue, 03 Nov 2026 09:00:00 GMT Nothing in the workflow changes. The page is content marketing, and the library size and the daily cadence on the marketplace page remain vendor claims with no dates. https://detectionascode.com/changelog/elastic-stack-9-5-6 https://detectionascode.com/changelog/elastic-stack-9-5-6 Mon, 02 Nov 2026 09:00:00 GMT A team on 9.4 or earlier does not get the History view. Patch level does not change that, so the upgrade target is the 9.5 line. https://detectionascode.com/changelog/splunk-research-newest-detection https://detectionascode.com/changelog/splunk-research-newest-detection Wed, 28 Oct 2026 09:00:00 GMT A Splunk team can treat the library as live, but should match a new detection to an ESCU release before assuming it is in its own instance. https://detectionascode.com/changelog/google-secops-gti-ioc-curated-rules https://detectionascode.com/changelog/google-secops-gti-ioc-curated-rules Mon, 12 Oct 2026 09:00:00 GMT Search your rule repository for legacy feed references and update them, and add that search to the pipeline so the next feed change is caught in review. https://detectionascode.com/changelog/elastic-prebuilt-rule-scoring https://detectionascode.com/changelog/elastic-prebuilt-rule-scoring Mon, 05 Oct 2026 09:00:00 GMT Elastic buyers get a published noise signal for prebuilt rules, which the other docs read do not match. Replay the Recommended set on your own data before you rely on the tags. https://detectionascode.com/changelog/google-secops-grok-match-all https://detectionascode.com/changelog/google-secops-grok-match-all Tue, 15 Sep 2026 09:00:00 GMT If you edit a parser, replay the rules that read its fields before and after. The release note adds a capability and carries no warning for existing rules. https://detectionascode.com/changelog/splunk-escu-6-6-0 https://detectionascode.com/changelog/splunk-escu-6-6-0 Thu, 10 Sep 2026 09:00:00 GMT A Splunk team should review the 18 updated analytics against the rules it has tuned, because an update can overwrite a local change. https://detectionascode.com/changelog/splunk-escu-6-5-0 https://detectionascode.com/changelog/splunk-escu-6-5-0 Thu, 27 Aug 2026 09:00:00 GMT If your pipeline builds content with contentctl, the 6.5.0 and 6.6.0 releases are the next two diffs to review. https://detectionascode.com/changelog/google-secops-mandiant-rule-packs https://detectionascode.com/changelog/google-secops-mandiant-rule-packs Wed, 26 Aug 2026 09:00:00 GMT Teams with Linux, macOS or Google Cloud log sources have new curated content to enable. Replay it on your data first, since no rule count or tuning guidance is given. https://detectionascode.com/changelog/google-secops-unroll-processor https://detectionascode.com/changelog/google-secops-unroll-processor Mon, 24 Aug 2026 09:00:00 GMT If you adopt Unroll, check threshold and match-window rules on the affected log types, because event counts can change. https://detectionascode.com/changelog/sentinel-mitre-coverage-doc https://detectionascode.com/changelog/sentinel-mitre-coverage-doc Wed, 12 Aug 2026 09:00:00 GMT Use the matrix as a planning view and keep the preview label in any report. A filled cell shows a rule mapped to a technique, not a technique tested. https://detectionascode.com/changelog/sentinel-repositories-doc https://detectionascode.com/changelog/sentinel-repositories-doc Sat, 08 Aug 2026 09:00:00 GMT Plan the repository around the Defender portal's custom detection rules, and treat the preview as subject to change before you move rules over.