Nine Analytic Rules and ten Hunting Queries for Okta SSO have been overhauled with configurable thresholds, allowlist variables, improved JSON parsing, and corrected entity mappings, closing fidelity gaps that degraded Sentinel entity behaviour and alert context. Read More →
Critical Okta detection was broken after connector migration — now uses OktaSSO parser to restore session impersonation monitoring. Read More →
Microsoft has deprecated Azure Function-based connectors for Okta SSO, SentinelOne, Sophos Endpoint Protection, and VMware Carbon Black Cloud in favor of CCF alternatives. Read More →
New deployment-ready training lab delivers 14 guided exercises with pre-recorded telemetry, detection rules, and automation workflows for practical Microsoft Sentinel skill development. Read More →
Resolved ARM TTK validation error by parameterizing hardcoded SessionId reference in deployment template. Read More →
Cosmetic title change to clarify the connector uses Codeless Connector Framework for Okta API ingestion. Read More →
New ASIM parser normalizes Okta authentication events from OktaSystemLogs table to standard Authentication schema. Read More →