New Cyble Vision Threat Intelligence Solution: Comprehensive CCF-Based Alert Platform

Massive new Cyble Vision solution providing 40+ specialized detection rules and parsers for diverse threat intelligence feeds from dark web to cloud security. Read More →

SOX IT Compliance Solution Released: IT Change Monitoring for Financial Controls

New compliance monitoring solution provides IT systems change tracking and segregation of duties controls for Sarbanes-Oxley compliance programs. Read More →

Ermes Browser Security Connector — Enhanced Data Fidelity and Multi-Tenant Support

CCF connector update fixes timestamp extraction, adds configurable API endpoints, and expands log data collection for better event visibility. Read More →

Proofpoint POD: Fixing WebSocket Connector to Eliminate Duplicate Data Ingestion

Removed time-based query parameters from Proofpoint On-Demand Email Security connector to prevent duplicate data ingestion caused by time rounding overlaps. Read More →

SOC Prime Platform: New CCF Connector for Audit Log Visibility

New SOC Prime Platform audit logs data connector added using CCF framework, providing visibility into SOC Prime TDM platform user activities and administrative actions. Read More →

ZeroFox CCF Connector: KQL Query Restoration and Multi-Solution Maintenance

ZeroFox CCF connector receives missing KQL query fixes alongside packaging updates across 8+ solutions. Read More →

ZeroFox Connector: Fixing Stream Naming Inconsistency Breaking Alert Ingestion

Stream name mismatch between DCR and connector config prevented ZeroFox threat alerts from reaching Sentinel workspaces. Read More →

Palo Alto Prisma Cloud Connector: Policy Data Restored with Missing "detailed" API Flag

Critical data fidelity fix for Palo Alto Prisma Cloud CCF connector — added missing “detailed” flag to API queries, restoring previously excluded policy field data. Read More →

New Quokka Qscout Mobile App Security Solution: Mobile Threat Detection Visibility

CCF connector and detection rule for Quokka Qscout mobile app security analysis platform provides visibility into malicious mobile application findings. Read More →

ZeroFox Enterprise: New CCF Connector Replaces Deprecated CCP Implementation

ZeroFox alert ingestion modernized with CCF-based connector, replacing deprecated CCP framework. Read More →

QualysVM Connector: API Rate Limiting and Configurable Truncation Protection

QualysVM connector enhanced with 1 QPS rate limiting and configurable truncation limits to prevent API abuse. Read More →

Cyera DSPM Solution: New Data Security Posture Management Integration

New solution added for Cyera DSPM providing data security monitoring with both CCF and Function App connectors. Read More →

Varonis Purview: New Push Connector for Microsoft Purview Data Governance Integration

New solution providing push connector to sync Varonis data resources into Microsoft Purview via Sentinel data lake. Read More →

SAP BTP Connector: Critical Pagination Fix Restores Missing Security Events

CCF connector pagination bug fixed - deployments were missing audit events due to failed token parsing. Read More →

New Pathlock Threat Detection and Response Solution: SAP Security Integration for Microsoft Sentinel

Push-based connector integrating Pathlock TDnR SAP security monitoring with Microsoft Sentinel for enhanced SAP application security visibility. Read More →

OneTrust Data Security Platform Connector: New Privacy and Risk Management Visibility

New CCF-based connector for OneTrust enables monitoring of privacy compliance, data governance, and risk management activities in Sentinel workspaces. Read More →

Morphisec Solution: New CCF Connector for Advanced Threat Prevention and Endpoint Security

New Morphisec CCF connector provides endpoint protection monitoring with advanced threat detection capabilities and process-level anomaly detection. Read More →

BigID DSPM Solution: New CCF Connector for Data Security Posture Management

New BigID DSPM solution provides CCF connector for ingesting data security posture cases, affected objects, and datasource information into Microsoft Sentinel. Read More →

Palo Alto Prisma Cloud CSPM: Solution Graduates from Preview to General Availability

Palo Alto Prisma Cloud CSPM solution v3.0.3 moves to GA, removing preview tag and deprecated Function App connector in favor of CCF-only deployment. Read More →

Sentinel CCF Packaging Tool: Adding JWT Token Authentication Support

CCF packaging tooling now supports JWT token authentication alongside existing methods for connector development. Read More →