diff --git a/CHANGES b/CHANGES
index a9aa780088..2b6b10ffcb 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,9 @@
 
+3.2.0-dev.467 | 2020-05-04 18:00:35 -0700
+
+  * GH-952: Correct spelling of DCE/RPC operation string NetrLogonSameLogonWithFlags
+    (Jon Siwek, Corelight)
+
 3.2.0-dev.466 | 2020-05-04 17:50:14 -0700
 
   * Add network_time_init() event. (Jan Grashoefer)
diff --git a/NEWS b/NEWS
index 3ed525fad2..b394d78d7f 100644
--- a/NEWS
+++ b/NEWS
@@ -83,6 +83,9 @@ Changed Functionality
 - Reorganize the file signatures to break them out into more groups.  This may
   break scripts that had been explicitly loading any signature files that moved.
 
+- The DCE/RPC operation string of "NetrLogonSamLogonWithFlags" has been
+  corrected from "NetrLogonSameLogonWithFlags".
+
 Removed Functionality
 ---------------------
 
diff --git a/VERSION b/VERSION
index 6abf7aa3ab..1bb67fb069 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-3.2.0-dev.466
+3.2.0-dev.467
diff --git a/doc b/doc
index c5a1ae5793..86dccb0b38 160000
--- a/doc
+++ b/doc
@@ -1 +1 @@
-Subproject commit c5a1ae5793b46d65ee3ba9b269a7fc899490734b
+Subproject commit 86dccb0b38a0af12170079f2b98c2c23ce51de32
diff --git a/scripts/base/protocols/dce-rpc/consts.zeek b/scripts/base/protocols/dce-rpc/consts.zeek
index b47020da33..12d3c7cba4 100644
--- a/scripts/base/protocols/dce-rpc/consts.zeek
+++ b/scripts/base/protocols/dce-rpc/consts.zeek
@@ -267,7 +267,7 @@ export {
 		["12345678-1234-abcd-ef00-01234567cffb",0x2a] = "NetrServerTrustPasswordsGet",
 		["12345678-1234-abcd-ef00-01234567cffb",0x2b] = "DsrGetForestTrustInformation",
 		["12345678-1234-abcd-ef00-01234567cffb",0x2c] = "NetrGetForestTrustInformation",
-		["12345678-1234-abcd-ef00-01234567cffb",0x2d] = "NetrLogonSameLogonWithFlags",
+		["12345678-1234-abcd-ef00-01234567cffb",0x2d] = "NetrLogonSamLogonWithFlags",
 		["12345678-1234-abcd-ef00-01234567cffb",0x2e] = "NetrServerGetTrustInfo",
 		["12345678-1234-abcd-ef00-01234567cffb",0x2f] = "unused",
 		["12345678-1234-abcd-ef00-01234567cffb",0x30] = "DsrUpdateReadOnlyServerDnsRecords",