What Changed

Removed redundant “excludeFields”: [] property from TheHive CCF polling configuration to resolve ARM Template Toolkit (ARM-TTK) validation warnings.

Security Impact

No security impact — this is a configuration cleanup that removes an unused/empty field flagged by deployment validation tooling. The TheHive connector continues to ingest security incident and case management data with the same functionality.

The connector maintains its ability to collect case lifecycle events, investigation artifacts, and incident response workflows from TheHive platforms for security orchestration visibility in Sentinel.

Affected Files

Solutions/TheHive/Data Connectors/CCF/PollingConfig.json
(packaging artefacts: 3.0.2.zip, ReleaseNotes.md, mainTemplate.json)