What Changed

Varonis SaaS Function App connector updated with persistent state management using Azure Blob Storage to track the last successful alert ingestion timestamp across function executions.

Security Impact (Visibility & Fidelity)

Previous connector implementation relied on timer schedule status which could result in data gaps during connector restarts, Azure Functions cold starts, or deployment updates. The new BlobStateSaver implementation ensures continuous data collection by persisting the last IngestTime, eliminating the risk of missing security alerts during service interruptions. This addresses a critical blind spot where Varonis security alerts could be lost between connector runs.

Affected Files

Solutions/VaronisSaaS/Data Connectors/VaronisSaaSFunction/Varonis.Sentinel.Functions/FetchDataFunction.cs
Solutions/VaronisSaaS/Data Connectors/VaronisSaaSFunction/Varonis.Sentinel.Functions/State/BlobStateSaver.cs
Solutions/VaronisSaaS/Workbooks/VaronisSaaS.json
(packaging artefacts: mainTemplate.json, Solution_VaronisSaaS.json, ReleaseNotes.md)