VMware vCenter ASIM Parser: DvcId Type Correction Prevents Query Failures
Fixed critical data type mismatch in VMware vCenter authentication parser that caused DvcId field queries to fail. Read More →
ASIM
ASIM Agent Event Schema: New Normalization Framework for Security Agent Monitoring
Microsoft Sentinel gains ASIM Agent Event schema for normalizing security agent events across all vendor platforms. Read More →
Halcyon Anti-Ransomware: Connector Overhaul from ASIM to OCSF Schema Architecture
Halcyon connector migrated from direct ASIM ingestion to OCSF schema with ASIM transformation parsers, replacing 5 custom tables with unified HalcyonEvents_CL table. Read More →
Microsoft 365 Defender Process Parsers: Enhanced File Metadata Visibility
ASIM Process Event parsers for Microsoft 365 Defender now extract file version metadata, improving process attribution and hunt query precision. Read More →
ASIM Process Event Parsers: Parameter Standardization Fixes Filtering Logic Inconsistencies
ASIM Process Event parser parameter names corrected to match documentation, fixing filtering logic discrepancies that could affect query performance and parser interoperability. Read More →
Cisco ISE ASIM Parser: Correcting IP Address Field Mappings
Cisco ISE Administrator authentication parser fixes swap incorrect SrcIpAddr and TargetIpAddr mappings that broke network forensics queries. Read More →
VMware vCenter ASIM Parser: Fixing Field Mappings After ASIM Schema Updates
Critical fixes to VMware vCenter authentication parser resolve incorrect field mappings that broke queries referencing User and DvcId fields. Read More →
ASIM Authentication: New Parser for Cisco ISE Administrator Login Events
Added ASIM Authentication parser for Cisco ISE administrator authentication events, expanding centralized network device visibility. Read More →
Fortinet FortiGate ASIM Authentication Parsers: Schema Version Metadata Correction
Updates schema version metadata from 0.1.3 to 0.1.4 in FortiGate authentication parsers with no functional changes. Read More →
Cisco Umbrella ASIM Parser: Fixing Variable Scope Bug in IP Filter Logic
Moves critical IP filtering variables inside parser function to prevent incorrect filtering and potential data loss. Read More →
Palo Alto GlobalProtect: New ASIM Authentication Parser for VPN Monitoring
New ASIM parser normalizes GlobalProtect VPN authentication events from CommonSecurityLog table, enabling unified monitoring of gateway and portal authentication across Palo Alto PAN-OS deployments. Read More →
ASIM Parser Validation: Critical Schemas Added to CI Pipeline
Four ASIM schemas missing from KQL validation pipeline now included, preventing unvalidated parser deployments. Read More →
ASIM Authentication Schema: VMware vCenter Parser Enables Authentication Monitoring for On-Premises and Azure VMware Environments
New ASIM parser normalizes VMware vCenter authentication events from syslog streams to enable detection coverage across vSphere environments. Read More →
ASIM Schema: Enhanced EntitySource Coverage for Data Platform Assets
ASimTester validation schema adds Snowflake, Databricks, and Salesforce to AssetEntity EntitySource enumeration for broader data platform asset tracking. Read More →
Cisco IOS: New ASIM Authentication Parser for Network Device Login Monitoring
ASIM authentication parser for Cisco IOS enables normalized monitoring of login, logout, and failed authentication events from network infrastructure devices. Read More →
ASIM AssetEntity Schema: EntitySource Enumeration and EntityOriginalSource Added
ASIM AssetEntity schema now enforces cloud platform enumeration and adds source traceability field. Read More →
Check Point Smart Defense: ASIM NetworkSession Parser Expands Threat Prevention Visibility
New ASIM NetworkSession parser adds Check Point Smart Defense logs to normalized threat monitoring and detection coverage. Read More →
ASIM AlertEvent Parser: Microsoft Defender XDR Missing AlertOriginalStatus Field Restored
Critical data fidelity fix restores missing AlertOriginalStatus field in Microsoft Defender XDR ASIM AlertEvent parser, resolving alert status visibility gap. Read More →
ASIM WebSession Parser: New Cisco Umbrella Proxy Log Coverage
New ASIM parser adds web session visibility for Cisco Umbrella proxy logs, normalizing HTTP/HTTPS traffic data to standard schema. Read More →
ASIM Data Tester Enhanced: New Type Validation for Asset Schema Fields
ASIM Data Tester adds DynamicType and ArrayValuesType validation columns to improve dynamic field type checking accuracy. Read More →