What Changed
The CrowdStrike Falcon Adversary Intelligence Function App connector’s Azure Functions extension bundle version constraint was updated from “[4.0.0, 5.0.0)” to “[4.*, 5.0.0)” in the host.json configuration file.
Security Impact (Visibility & Fidelity)
This fixes a deployment blocker that prevented the Function App from starting. Deployments running the previous version would fail to deploy the connector entirely — zero threat intelligence indicators were ingested from CrowdStrike Falcon X into the ThreatIntelligenceIndicator table.
The stricter version constraint “[4.0.0, 5.0.0)” caused compatibility conflicts with Azure Functions runtime versions 4.1.x and higher, preventing the connector from initializing and resulting in complete ingestion failure.
Affected Files
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/host.json
(packaging artefacts: CrowdStrikeFalconThreatIntelConnector.zip)