Valimail Enforce Solution: Publisher Name Typo Corrected in Sentinel UI
Fixes misspelled publisher name from Valimmail to Valimail in the Data Connector configuration UI. Read More →
Agent 365 Solution: Content Hub Update Detection Restored After Package ID Mismatch
Restores Agent 365 v3.1.1 Content Hub update detection by fixing solution ID mismatch that prevented upgrade notifications. Read More →
ASIM Schema Testing: EventProduct and EventVendor Enumerations Removed
Removes vendor/product enumerations from ASimTester configuration to reduce maintenance overhead. Read More →
ASIM Parser Testing: Bitdefender GravityZone Validation Conflict Resolved
Removes duplicate CustomFunction test shim causing KQL validation failures after parser merge. Read More →
Digital Shadows: Updated EventReportUrl to Use GreyMatter Platform Links
Digital Shadows analytic rules now use server-provided GreyMatter URLs instead of deprecated portal links, preventing broken URL entities in Sentinel incidents. Read More →
Vaikora Connector: Zero Data Ingestion Fixed After DCR Stream Mapping Failure
Critical fix restores Vaikora AI agent behavioral data after complete ingestion failure caused by DCR stream column mismatch. Read More →
SAP Solution: Analyzer Marketplace Visibility and Agentless Connector Discovery Fixed
Tools fixes enable proper SAP solution marketplace tracking and make the SAPCC agentless connector visible to the Microsoft Sentinel Solutions Analyzer. Read More →
Lookout Connector: Critical Data Loss Fix for Mobile Threat Event Identifiers
Lookout Mobile Risk API v2 connector was silently dropping unique event identifiers (oid field), breaking all downstream correlation in detections and workbooks. Read More →
Check Point ASIM NetworkSession Parser: DeviceVendor Field Matching Fix
Check Point firewall ASIM parser updated to handle both “Check Point” and “CheckPoint” DeviceVendor field values, fixing parsing failures introduced in PR #12056. Read More →
BitSight Solution: Provider Information Updated to Partner Status
BitSight solution metadata updated to reflect partner provider status, transitioning from Microsoft internal to external partner support. Read More →
Zoom Data Connector: Legacy Azure Function Files Removed from Standalone Location
Legacy Zoom connector files removed from DataConnectors folder — connector has been migrated to Solutions/ZoomReports. Read More →
Corelight: Dashboard Restructure and New Asset Classification Tab for Enhanced Network Visibility
Corelight solution restructured workbooks and added asset classification functionality to improve network asset discovery and security monitoring capabilities. Read More →
Pathlock TD&R: Major Detection Coverage Expansion with 77 New SAP-Focused Analytic Rules
Pathlock Threat Detection & Response adds 77 comprehensive SAP security analytic rules covering ABAP changes, user activities, system modifications, and financial data access. Read More →
CyberArk EPM: Migration to DCR and OAuth Authentication Replaces Deprecated Log Analytics API
CyberArk EPM connector updated to use DCR ingestion and OAuth authentication, addressing deprecation of Log Analytics API and improving security. Read More →
BeyondTrust PM Cloud: Function App Reliability Fix Prevents Timeout on Large Event Backlogs
Critical fix prevents BeyondTrust PM Cloud Function App timer functions from hanging when processing large event backlogs, restoring data ingestion reliability. Read More →
GitHub Audit Log Connector: Azure Storage Integration Addresses API Rate Limits
New Azure Storage-based GitHub Enterprise audit log connector overcomes CCF API rate limitations through Event Grid blob notifications. Read More →
Filewall for Microsoft 365: New Solution Adds Data Exfiltration Detection for Exchange and Files
Complete CCF-based solution delivers real-time monitoring of blocked emails and files across Microsoft 365 services with immediate threat alerting. Read More →
BitSight Solution: Support Tier Changed to Partner
BitSight solution support tier updated from Microsoft to Partner with version downgrade to 3.2.0. Read More →
Microsoft Agent Identities Connector: New Entra Non-Human Identity Asset Visibility (Preview)
Agent 365 solution adds new Microsoft Agent Identities connector for tracking agent blueprints and non-human identity assets across four data tables. Read More →
ASIM Authentication Parsers: Palo Alto Data Fidelity Fix for DvcIpAddr Field
ASIM Authentication parsers for Palo Alto PAN-OS and GlobalProtect now correctly populate DvcIpAddr field, fixing data fidelity gap. Read More →