All pull requests

Pull requests

• Added the received_time attribute to metadata and logger

  #1800·pagbabian-splunk opened Nov 5, 2026Contributor·

  ·
  1

• Link governance docs and use the maintainers team as code owner

  documentationmaintainersv1.10.0
  #1799·floydtree opened Nov 5, 2026Contributor·

  ·
  

• Allow AI-agent-only evidence artifacts

  ai_activityenhancementv1.10.0
  #1796·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Add call_stack to the actor object

  enhancementinput_neededsystem_activity
  #1794·Imyash27 opened Oct 30, 2026Contributor·

  ·
  8

• Add terminating signal to Process Activity

  input_neededsystem_activity
  #1793·Imyash27 opened Oct 30, 2026Contributor·

  ·
  5

• Add is_hidden to the file object

  enhancementsystem_activityv1.10.0
  #1792·Imyash27 opened Oct 30, 2026Contributor·

  ·
  9

• Add Kerberos pre-authentication type to authentication_token

  enhancementextensionssystem_activityv1.10.0
  #1791·Imyash27 opened Oct 30, 2026Contributor·

  ·
  3

• Update CHANGELOG.md

  duplicate
  #1790·anikd6 opened Oct 30, 2026Contributor·

  ·
  2

• Update CHANGELOG.md

  duplicate
  #1789·anikd6 opened Oct 30, 2026Contributor·

  ·
  3

• Add token elevation type to the Windows process object

  enhancementsystem_activityv1.10.0
  #1788·Imyash27 opened Oct 28, 2026Contributor·

  ·
  10

• Regsiter Extension for TrustPlane (switching from an older extension placeholder)

  #1781·anikd6 opened Oct 15, 2026Contributor·

  ·
  5

• Agent Containment concepts for OCSF core

  ai_activity
  #1765·Levaj2000 opened Sep 22, 2026Contributor·

  ·
  2

• Mark the schema's recursion points with @recursive

  metaschema
  #1763·zschmerber opened Sep 18, 2026Contributor·

  ·
  8

• Add Physical Security category with seven event classes and nine objects

  physical_securityv1.11.0-dev & later
  #1758·leeandrews9 opened Sep 11, 2026·

  ·
  1

• Add enum values for physical credentials, alarm dispositions, and physical logons

  physical_security
  #1757·leeandrews9 opened Sep 11, 2026·

  ·
  3

• [draft] Add AI Agent Activity event class.

  ai_activity
  #1754·davemcatcisco opened Sep 8, 2026Contributor·

  ·
  12

• Add physical_site profile, site_zone object, and physical site context attributes

  physical_securityv1.10.0
  #1750·leeandrews9 opened Sep 4, 2026·

  ·
  7

• Add causal_link object and optional caused_by on base_event

  #1741·aryanval opened Aug 26, 2026·

  ·
  1

• Add is_ml_only and is_corroborated for dual-signal finding triage

  findingsinput_needed
  #1732·AAH20 opened Aug 16, 2026·

  ·
  1

  10

• Add control_group object and process.control_group

  input_neededsystem_activity
  #1725·ErenAri opened Aug 12, 2026·

  ·
  18