ASIM Schema Tester: Fixing Critical Validation Gap for Common Fields
Critical fix restores validation of Common schema fields alongside schema-specific fields in ASIM parser testing. Read More →
ASIM
StealthTalk: New Enterprise Authentication Monitoring Solution with MITRE-Mapped Detection Portfolio
Complete StealthTalk Enterprise solution delivers four analytic rules targeting credential attacks (T1078, T1110, T1098) plus ASIM Authentication parsers and Teams integration. Read More →
Bitdefender GravityZone Parser: Critical Fix for Network Sandboxing Event Parsing Failure
ASIM parser for Bitdefender GravityZone was failing due to missing type cast, preventing ingestion of network sandboxing alerts. Read More →
Salesforce Service Cloud: New ASIM WebSession Parser Enables Normalized API/Web Request Monitoring
ASIM WebSession parser for Salesforce Service Cloud normalizes API and web session logs into standardized schema, enabling unified monitoring across SaaS platforms. Read More →
ASIM Schema Testing: EventProduct and EventVendor Enumerations Removed
Removes vendor/product enumerations from ASimTester configuration to reduce maintenance overhead. Read More →
ASIM Parser Testing: Bitdefender GravityZone Validation Conflict Resolved
Removes duplicate CustomFunction test shim causing KQL validation failures after parser merge. Read More →
SAP Solution: Analyzer Marketplace Visibility and Agentless Connector Discovery Fixed
Tools fixes enable proper SAP solution marketplace tracking and make the SAPCC agentless connector visible to the Microsoft Sentinel Solutions Analyzer. Read More →
Check Point ASIM NetworkSession Parser: DeviceVendor Field Matching Fix
Check Point firewall ASIM parser updated to handle both “Check Point” and “CheckPoint” DeviceVendor field values, fixing parsing failures introduced in PR #12056. Read More →
ASIM Authentication Parsers: Palo Alto Data Fidelity Fix for DvcIpAddr Field
ASIM Authentication parsers for Palo Alto PAN-OS and GlobalProtect now correctly populate DvcIpAddr field, fixing data fidelity gap. Read More →
ASIM Parser Development Automation: GitHub Copilot Skills for Accelerated Detection Engineering
GitHub Copilot agent skills now automate the complete ASIM parser creation workflow, reducing parser development time from days to hours for security engineers. Read More →
Bitdefender GravityZone Solution v3.0.1 Adds Incident Analytics for Endpoint and Email Protection
Complete Microsoft Sentinel solution integrating Bitdefender GravityZone multi-vector threat detection with DCR-based ingestion and XDR correlation. Read More →
ASIM AlertEvent Support Added for Bitdefender GravityZone Security Platform
New parsers enable normalization of Bitdefender GravityZone alert data into Microsoft Sentinel ASIM schema for unified threat detection. Read More →
Hunting Query: Rootkit Network Evasion Detection via Firewall-EDR Telemetry Delta
New hunting query detects kernel-level rootkits bypassing EDR network telemetry by comparing perimeter firewall logs against Microsoft Defender for Endpoint data streams. Read More →
ASIM AssetEntity Schema: Three New Fields Added in v1.0.0 Release
ASIM AssetEntity schema upgraded to v1.0.0 with three new fields for enhanced entity correlation and snapshot tracking. Read More →
OpenAI Connector: Migration to ASIM Standard Improves AI Monitoring Normalization
OpenAI chat completions data now ingests to ASimAgentEventLogs standard table, enabling standardized AI usage monitoring and cross-product correlation. Read More →
VMware ESXi: ASIM Authentication Parser for Host Access Monitoring
New ASIM parser normalizes VMware ESXi authentication events to enable centralized logon monitoring for hypervisor infrastructure. Read More →
Cisco Secure Endpoint: ASIM AlertEvent Parser for Cloud-Based Threat Detection
New ASIM parser enables normalized threat detection from Cisco Secure Endpoint via CCF ingestion to CiscoSecureEndpointEventsV2_CL table. Read More →
NXLog Solutions Deprecated: Loss of Multi-Platform Audit Visibility
Five NXLog partner solutions removed from Content Hub, eliminating data connector support for BSM macOS, FIM, Linux Audit, AIX Audit, and DNS monitoring across Unix/Linux environments. Read More →
M365 Defender ASIM Parser: TargetUserSessionId Field Restoration Fixes Data Fidelity Gap
Missing TargetUserSessionId field in Microsoft 365 Defender ASIM ProcessEvent parsers has been restored, fixing queries that previously returned null for this session correlation field. Read More →
VMware vCenter ASIM Parser: DvcId Type Correction Prevents Query Failures
Fixed critical data type mismatch in VMware vCenter authentication parser that caused DvcId field queries to fail. Read More →