Recorded Future

July 3, 2026

Recorded Future: Defender Portal Migration Breaks Incident Creation -- Playbooks Redesigned Around Analytic Rules

Recorded Future v3.2.20 removes direct incident creation from four playbooks (now incompatible with the unified Microsoft Defender portal) and introduces new Analytic Rules to restore incident generation from custom log tables. Read More →

May 7, 2026

Recorded Future Identity Playbook: ARM Template Deploy Failure Fixed

Fixes broken deployment of RFI-confirm-EntraID-risky-user playbook that failed with InvalidTemplate error due to stale action references. Read More →

April 21, 2026

Recorded Future Identity: Prepares for Microsoft Defender Portal Migration by Deprecating Legacy Incident Creation

Recorded Future Identity solution deprecates Logic Apps-based incident creation and introduces Analytic Rules for Microsoft Defender Portal compatibility. Read More →

April 20, 2026

Recorded Future Sandbox: Enhanced Region Support and Improved Threat Intelligence Structure

Recorded Future adds sandbox region configuration parameter and moves threat intelligence evidence details to comply with STIX standard structure. Read More →

April 2, 2026

Recorded Future: IOC Enrichment Noise Reduction via Risk Score Thresholding

Added configurable RiskScoreThreshold parameter to prevent low-risk IOCs from generating incident comments. Read More →

March 9, 2026

Recorded Future Playbooks: Threat Intelligence Integration Discontinued Due to Microsoft API Deprecation

Microsoft has deprecated the Graph Security tiIndicators API, rendering Recorded Future’s automated threat intelligence ingestion playbooks non-functional. Read More →