Merge pull request #3634 from splunk/ctl_5.12.0

patel-bhavin · web-flow · commit c5f13c70f343 · 2025-08-08T16:24:18.000-05:00
removed detections for 5.12.0
diff --git a/contentctl.yml b/contentctl.yml
@@ -3,7 +3,7 @@ app:
   uid: 3449
   title: ES Content Updates
   appid: DA-ESS-ContentUpdate
-  version: 5.11.0
+  version: 5.12.0
   description: Explore the Analytic Stories included with ES Content Updates.
   prefix: ESCU
   label: ESCU
diff --git a/removed/detections/any_powershell_downloadfile.yml b/removed/detections/any_powershell_downloadfile.yml
@@ -3,7 +3,7 @@ id: 1a93b7ea-7af7-11eb-adb5-acde48001122
 version: '16'
 date: '2025-06-23'
 author: Michael Haag, Splunk
-status: deprecated
+status: removed
 type: TTP
 description: The following analytic detects the use of PowerShell's `DownloadFile`
   method to download files. It leverages data from Endpoint Detection and Response
diff --git a/removed/detections/any_powershell_downloadstring.yml b/removed/detections/any_powershell_downloadstring.yml
@@ -3,7 +3,7 @@ id: 4d015ef2-7adf-11eb-95da-acde48001122
 version: 14
 date: '2025-07-29'
 author: Michael Haag, Splunk
-status: deprecated
+status: removed
 type: TTP
 description: The following analytic detects the use of PowerShell's `DownloadString`
   method to download files. It leverages data from Endpoint Detection and Response
diff --git a/removed/detections/windows_installutil_uninstall_option_with_network.yml b/removed/detections/windows_installutil_uninstall_option_with_network.yml
@@ -3,7 +3,7 @@ id: 1a52c836-43ef-11ec-a36c-acde48001122
 version: 13
 date: '2025-06-26'
 author: Michael Haag, Splunk
-status: deprecated
+status: removed
 type: TTP
 description: The following analytic identifies the use of Windows InstallUtil.exe
   making a remote network connection using the `/u` (uninstall) switch. This detection
diff --git a/requirements.txt b/requirements.txt
@@ -1 +1 @@
-contentctl==5.5.7
+contentctl==5.5.8
