MongoDB Atlas: Fixed Category Filter Bug and Improved Deployment Instructions

Fixed filtering bug when category is ’none’ and streamlined deployment documentation for MongoDB Atlas data connector. Read More →

Google Threat Intelligence: Enhanced Filtering for Threat List Queries

Custom connector updated with filter query parameters for more targeted threat intelligence retrieval. Read More →

Vectra XDR Connector: Python Runtime Upgrade and Authentication Security Fix

Vectra XDR connector upgraded to Python 3.12 and switched from DefaultAzureCredential to managed identity for production security. Read More →

SecurityBridge App Schema Update: New SecurityBridge_CL Table Enables Native SAP Log Ingestion

SecurityBridge App solution adds dedicated SecurityBridge_CL custom table with enhanced schema for native SAP security log processing via DCR. Read More →

GCP IAM Parser: Critical Type Handling Fix Resolves Parser Execution Failure

GCP IAM parser updated to version 3.0.7 with explicit type conversions for bool and datetime fields, fixing parser execution failures that prevented data ingestion. Read More →

BloodHound Enterprise Solution: Major v2.0 Upgrade with 105 New Detection Rules

Complete solution overhaul adds 105 analytic rules, new workbooks, and updated data connector with Azure Function v2 for enhanced Active Directory threat detection. Read More →

Tanium Solution: Content Hub Preview Image Display Fix (P0)

Fixed workbook preview image metadata for proper Content Hub display across multiple solutions including Tanium. Read More →

SOC Handbook: Fixed Mean Time to Triage Calculation Logic

Security Operations Efficiency workbook query corrected to properly calculate incident triage metrics. Read More →

Continuous Diagnostics & Mitigation: Workbook Hyperlink and Metrics Fix

Fixed broken hyperlinks and metrics in the Continuous Diagnostics & Mitigation workbook. Read More →

Tanium Playbook API Failure Fix: URL Encoding Bug Breaks Host Quarantine Operations

Critical fix for Tanium quarantine/unquarantine playbooks resolves API failures caused by improper URL encoding of package names containing special characters. Read More →

Event Log Management Maturity Model: Fixing Broken Links and Metrics

Workbook hyperlinks and metrics restored to address navigation and display issues. Read More →

Snowflake Security Detection Restoration: Critical Field Name Standardisation Fixes Query Failures

Comprehensive field name standardisation in Snowflake detection rules resolves widespread query failures caused by parser schema mismatches, restoring database activity monitoring. Read More →

MongoDB Atlas Connector: Enhanced Log Filtering and Performance Optimization

MongoDB Atlas Function App connector receives filtering capabilities and performance improvements for more efficient log ingestion. Read More →

Microsoft Entra ID Assets Solution: New Data Risk Graph Foundation for Purview Integration

New Microsoft Entra ID Assets connector provides supplemental asset data for enhanced activity insights and data risk graph capabilities in Microsoft Purview. Read More →

Anvilogic Solution Publisher ID Correction for Marketplace Publication

Anvilogic solution updated with correct publisherId to resolve publication issues preventing solution deployment from Content Hub. Read More →

Microsoft Defender for Endpoint: Modernized PowerShell SDK Instructions

Playbook deployment instructions updated to use Microsoft Graph SDK replacing deprecated AzureAD cmdlets. Read More →

NIST SP 800-53 Workbook: Broken Hyperlinks and Validation Errors Fixed

NIST SP 800-53 workbook updated with corrected hyperlinks and validation fixes to restore proper functionality. Read More →

QualysVM CCF Migration: Schema Update Fixes Data Parsing and Entity Mapping Failures

QualysVM solution migration to CCF connector resolves critical schema mismatches causing detection failures and incorrect entity mapping for vulnerability data. Read More →

Auth0 Workbook: Comprehensive Authentication Log Monitoring and Analysis

New Auth0 monitoring workbook provides authentication insights, user activity tracking, and security event visualization for improved identity security monitoring. Read More →

ProofPoint TAP Connector: Critical Table Name Update for CCF Schema

Workbook queries updated to use CCF V2 table names, preventing data visualization failures after connector migration. Read More →