ZeroFox CCF Connector: KQL Query Restoration and Multi-Solution Maintenance

What Changed

Primary fix addresses missing KQL query in ZeroFox CCF connector (ConnectorDefinition.json and DCR.json). Secondary changes include parser enhancements for Cisco Umbrella with new AI-related fields, substantial Teams C# connector code removal, and packaging updates across multiple solutions.

Security Impact (Visibility & Fidelity)

ZeroFox deployments using the CCF connector may have experienced reduced query functionality due to the missing KQL component. The fix restores proper query capabilities for threat intelligence correlation against ZeroFox alert data.

Affected Files

Solutions/ZeroFox/Data Connectors/Alerts/ZeroFoxAlerts_ConnectorDefinition.json
Solutions/ZeroFox/Data Connectors/Alerts/ZeroFoxAlerts_DCR.json
Solutions/CiscoUmbrella/Data Connectors/ciscoUmbrellaDataConn/__init__.py
Solutions/CiscoUmbrella/Parsers/Cisco_Umbrella.yaml
Tools/Solutions Analyzer/solution_connector_tables.py
(packaging artefacts: mainTemplate.json files, createUiDefinition.json, zip packages across 8+ solutions)