What Changed
Fixed column name mapping bug in Salesforce Service Cloud CCF connector DCR configuration, plus updates to ASIM SentinelOne parsers and multiple solution packaging updates.
Security Impact (Visibility & Fidelity)
The Salesforce Service Cloud connector had broken column name mappings in the DCR transform causing data ingestion failures. Missing USER_NAME column and incorrect field references prevented proper data collection from Salesforce environments. Per PR title, this was identified as a bug in the CCF Data Connector.
Parser Impact
ASIM SentinelOne parsers updated with improved regex patterns for attack tactic extraction and proper FileSize type conversion from double to long for data fidelity.
Affected Files
Solutions/Salesforce Service Cloud/Data Connectors/SalesforceSentinelConnector_CCP/SalesforceServiceCloud_DCR.json
Solutions/Salesforce Service Cloud/Data Connectors/SalesforceSentinelConnector_CCP/SalesforceServiceCloud_Tables.json
Parsers/ASimAlertEvent/Parsers/ASimAlertEventSentinelOneSingularity.yaml
(extensive packaging artefacts across 30+ files)