What Changed

D3 Security updated their Smart SOAR solution from version 3.1.0 to 3.2.0, primarily to address Content Hub compatibility. The core change is migrating from a Managed Application plan type to a Solution Template plan type in Partner Center, necessitating a new offer ID: azure-sentinel-solution-d3smartsoar (previously azure-sentinel-solution-d3soar).

Solution Impact

New Solution Identity: This creates a new solution identity in Content Hub. Existing D3 Smart SOAR deployments will not receive updates through the previous offer ID. Organizations currently using the solution will need to deploy the new version separately, creating potential duplication until the legacy version is removed.

No Functional Changes: The underlying connector logic, polling configuration, and data ingestion remain unchanged. The D3SOARIncidents_CL table structure and 5-minute polling interval are preserved from version 3.1.0.

Support URL Updated: Contact endpoint changed to https://d3security.com/company/contact/ for future support requests.

Deployment Considerations

Organizations should:

  • Deploy the new 3.2.0 solution alongside existing installations
  • Verify no data collection gaps during transition
  • Remove legacy D3 Smart SOAR solution after confirming new version functionality
  • Update any automation or documentation referencing the previous offer ID

Affected Files

Solutions/D3SmartSOAR/README.md
(packaging artefacts: 3.2.0.zip, ReleaseNotes.md, SolutionMetadata.json, Solution_D3SOAR.json, mainTemplate.json)