Continuous Diagnostics & Mitigation: Workbook Hyperlink and Metrics Fix
Fixed broken hyperlinks and metrics in the Continuous Diagnostics & Mitigation workbook. Read More →
Changelog
Tanium Playbook API Failure Fix: URL Encoding Bug Breaks Host Quarantine Operations
Critical fix for Tanium quarantine/unquarantine playbooks resolves API failures caused by improper URL encoding of package names containing special characters. Read More →
Event Log Management Maturity Model: Fixing Broken Links and Metrics
Workbook hyperlinks and metrics restored to address navigation and display issues. Read More →
Snowflake Security Detection Restoration: Critical Field Name Standardisation Fixes Query Failures
Comprehensive field name standardisation in Snowflake detection rules resolves widespread query failures caused by parser schema mismatches, restoring database activity monitoring. Read More →
MongoDB Atlas Connector: Enhanced Log Filtering and Performance Optimization
MongoDB Atlas Function App connector receives filtering capabilities and performance improvements for more efficient log ingestion. Read More →
Microsoft Entra ID Assets Solution: New Data Risk Graph Foundation for Purview Integration
New Microsoft Entra ID Assets connector provides supplemental asset data for enhanced activity insights and data risk graph capabilities in Microsoft Purview. Read More →
Anvilogic Solution Publisher ID Correction for Marketplace Publication
Anvilogic solution updated with correct publisherId to resolve publication issues preventing solution deployment from Content Hub. Read More →
Microsoft Defender for Endpoint: Modernized PowerShell SDK Instructions
Playbook deployment instructions updated to use Microsoft Graph SDK replacing deprecated AzureAD cmdlets. Read More →
NIST SP 800-53 Workbook: Broken Hyperlinks and Validation Errors Fixed
NIST SP 800-53 workbook updated with corrected hyperlinks and validation fixes to restore proper functionality. Read More →
QualysVM CCF Migration: Schema Update Fixes Data Parsing and Entity Mapping Failures
QualysVM solution migration to CCF connector resolves critical schema mismatches causing detection failures and incorrect entity mapping for vulnerability data. Read More →
Auth0 Workbook: Comprehensive Authentication Log Monitoring and Analysis
New Auth0 monitoring workbook provides authentication insights, user activity tracking, and security event visualization for improved identity security monitoring. Read More →
ProofPoint TAP Connector: Critical Table Name Update for CCF Schema
Workbook queries updated to use CCF V2 table names, preventing data visualization failures after connector migration. Read More →
Microsoft Entra ID Connector: Preview Labels Removed from GA Data Types
Entra ID connector updated to remove preview designations from data types that have reached general availability. Read More →
Zero Trust Workbook: Removing Deprecated NetworkMap Component
Zero Trust solution package updated to remove deprecated networkmap visualization due to upstream repository retirement. Read More →
Cybersixgill Connector: TLS and SSL Security Hardening
Cybersixgill Function App connector enforces minimum TLS 1.2 and disables public blob access to meet encryption-in-transit requirements. Read More →
Microsoft Defender Threat Intelligence: Playbooks Enhanced with Managed Identity Security
MDTI playbooks updated to use managed identity authentication and Graph API v1.0 — eliminates client secret management. Read More →
Cisco Duo Security Solution: New Log Endpoints Support Added in Version 3.0.3
Cisco Duo Security solution updated to version 3.0.3 with enhanced data ingestion capabilities through new log endpoint support. Read More →
Commvault Security IQ Authentication Security Hardening: Managed Identity and HTTPS Enforcement
Commvault Security IQ connector security improvements include managed identity authentication and removal of SSL verification bypass for enhanced security posture. Read More →
Oracle Cloud Infrastructure Connector Setup: Partition Limitation Documentation Added
Oracle Cloud Infrastructure CCP connector instructions updated to clarify single-partition limitation and provide clearer partition ID guidance. Read More →
Zero Trust Workbook: Network Map Component Removed Due to Repository Deprecation
Network mapping visualization removed from Zero Trust (TIC3.0) workbook following upstream repository deprecation. Read More →