What Changed

Four Azure Function-based connectors have been marked as deprecated with the [DEPRECATED] prefix added to their titles:

  • Atlassian Jira Audit (using Azure Function) → replaced by CCF version (already available since v3.0.5)
  • Auth0 Logs (using Azure Function) → replaced by CCF version (already available since v3.1.4)
  • Box Events (using Azure Function) → replaced by CCF version (already available since v3.1.3)
  • CrowdStrike Falcon Data Replicator (CrowdStrike Managed AWS-S3) (using Azure Function) → migration path to CCF pending

Security Impact (Visibility & Fidelity)

The deprecated Function App connectors remain fully functional — this change only adds deprecation labeling to guide users toward the modern CCF alternatives. Organizations currently using these Function App connectors maintain their existing data ingestion without interruption.

Migration Consideration: The CCF versions provide the same data ingestion capabilities with improved reliability, reduced maintenance overhead, and better integration with Microsoft Sentinels native architecture. Organizations should plan migration to the CCF versions to ensure long-term supportability.

CrowdStrike Note: The CrowdStrike connector deprecation signals an upcoming CCF replacement, but the modern alternative is not yet available in this release.

Affected Files

Solutions/AtlassianJiraAudit/Data Connectors/JiraAudit_API_FunctionApp.json
Solutions/Auth0/Data Connectors/Auth0_FunctionApp.json
Solutions/Box/Data Connectors/Box_API_FunctionApp.json
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdstrikeReplicatorCLv2/CrowdstrikeReplicatorV2_ConnectorUI.json
(packaging artefacts: 3.0.6.zip, 3.1.4.zip, 3.1.5.zip, 3.3.3.zip, ReleaseNotes.md, Solution_AtlassianJiraAudit.json, Solution_Auth0.json, Solution_Box.json, mainTemplate.json)