Visa Threat Intelligence: ARM Template Certification Fix
Replaces deprecated concat with uri function in ARM template to meet Azure certification requirements. Read More →
Changelog
Qualys KB Connector Now GA: Production-Ready Vulnerability Intelligence
Qualys Knowledge Base connector moves from Preview to General Availability, providing production-grade vulnerability intelligence ingestion with enhanced monitoring capabilities. Read More →
Vaikora AI Security: New Logic App Playbook for SentinelOne Threat Intelligence Integration
Data443 introduces Vaikora AI agent behavioral signal integration with SentinelOne threat intelligence via a 6-hour polling playbook. Read More →
New Spur Context API Solution: High-Fidelity IP Intelligence for VPN and Proxy Detection
New solution provides real-time IP enrichment to detect VPN, residential proxy, and bot automation traffic in incidents and alerts. Read More →
Qualys VM Connector: API Version 5.0 Migration Before Deprecation
Qualys VM connector upgraded from API v3.0 to v5.0 to prevent June deprecation cutoff impacting vulnerability data ingestion. Read More →
Zoom Connector GA Release: Enhanced Data Ingestion with New Table Schema
ZoomReports CCF connector transitions to GA with parser supporting dual-table ingestion and expanded field coverage. Read More →
Training Lab: Fixed Detection Rule Deployment Script Resilience
Lab deployment script now retries on any table syntax errors, not just OktaV2_CL — prevents silent deployment failures. Read More →
Okta Detection Rule: Fixed Blind Spot After Connector Migration to OktaV2_CL
Critical Okta detection was broken after connector migration — now uses OktaSSO parser to restore session impersonation monitoring. Read More →
Seraphic Web Security: Upgraded to v3.0.0 Content Schema with Enhanced Polling
Seraphic Web Security solution upgraded to v3.0.0 schema with polling v3.0, health checks, and corrected connectivity criteria. Read More →
Salesforce Service Cloud Connector: Enhanced Event Coverage and OAuth2 Support
Salesforce connector v3.1.0 adds comprehensive Event Log File coverage and OAuth2 username-password authentication for improved deployment flexibility. Read More →
GitHub Webhook V2 Connector: CLv2 Migration Ensures Continued GitHub Advanced Security Ingestion
New CLv2-based GitHub Webhook connector replaces deprecated CLv1 API to maintain ingestion of code scanning, Dependabot, and secret scanning alerts. Read More →
Bitdefender GravityZone: New Push-Based Security Data Connector for Sentinel
New GravityZone solution brings enterprise endpoint threat data directly to Sentinel via DCR-based push ingestion without bundled detections. Read More →
Lookout Connector: Critical ARM Template Fix Restores Mobile Threat Data Ingestion
Fixed bracket escaping bug in ARM template that caused complete Lookout connector deployment failure. Read More →
Vaikora Solution: New AI Agent Governance Connector for Microsoft Sentinel
New CCF connector ingests Vaikora AI agent behavioral signals with 3 detection rules for policy violations, anomalies, and high-risk actions. Read More →
ASIM Agent Event Schema: New Normalization Framework for Security Agent Monitoring
Microsoft Sentinel gains ASIM Agent Event schema for normalizing security agent events across all vendor platforms. Read More →
AWS ELB Solution Moves to General Availability
AWS Elastic Load Balancer solution transitions from Public Preview to GA status, confirming production readiness for ALB/NLB access log monitoring. Read More →
Lookout Solution: Version 3.0.3 Certification Resubmission
Version bump from 3.0.2 to 3.0.3 for certification resubmission with ARM template parameter fix. Read More →
Valimail Enforce Solution: New Email Authentication Monitoring for DMARC/SPF/DKIM Configuration Changes
Complete Valimail Enforce monitoring solution delivers real-time detection of email authentication policy weakening and suspicious admin activity affecting domain security posture. Read More →
Halcyon Anti-Ransomware: Connector Overhaul from ASIM to OCSF Schema Architecture
Halcyon connector migrated from direct ASIM ingestion to OCSF schema with ASIM transformation parsers, replacing 5 custom tables with unified HalcyonEvents_CL table. Read More →
SOCRadar XTI Platform: New Extended Threat Intelligence Solution Launches with Bidirectional Sync
SOCRadar XTI Platform solution now available in Content Hub with automated alarm import, incident sync, and comprehensive threat intelligence monitoring capabilities. Read More →