What Changed

The Varonis Purview CCF connector received significant schema improvements in version 3.0.1, including field additions, data type corrections, and table naming standardization.

Security Impact (Visibility & Fidelity)

Before this update, queries referencing several fields against the VaronisResources_CL table experienced data fidelity issues:

  • AssetName, Risks, Classification, AADTenantID fields returned inconsistent results due to incorrect dynamic typing where structured data was expected
  • LastAccessDateTime and ClassificationLastScanDateTime fields were unusable for time-based queries due to incorrect data types
  • Two new fields (AssetName, SensitivityLabel, ClassificationLastScanDateTime) were completely unavailable, creating gaps in asset visibility

The schema updates restore proper data typing for asset correlation queries and add critical fields for Microsoft Purview integration workflows. The table name change from varonisresources_CL to VaronisResources_CL standardizes casing for consistent query patterns.

Schema Changes

Key data type corrections:

  • SubWorkload, Risks, Classification, AADTenantID: Changed from dynamic to string for consistent querying
  • LastAccessDateTime: Renamed from LastAccess and changed from dynamic to datetime for proper temporal operations
  • Added AssetName, SensitivityLabel, ClassificationLastScanDateTime fields for enhanced asset metadata coverage

Affected Files

Solutions/Varonis Purview/Data Connectors/VaronisPurview_ccp/VaronisPurview_DCR.json
Solutions/Varonis Purview/Data Connectors/VaronisPurview_ccp/VaronisPurview_connectorDefinition.json
Solutions/Varonis Purview/Data Connectors/VaronisPurview_ccp/VaronisPurview_table.json
(packaging artefacts: 3.0.1.zip, ReleaseNotes.md, mainTemplate.json)