MailRisk CCF Connector: Critical Parameter Syntax Fix for Deployment Failures
Fixed CCF deployment blocking issue in MailRisk connector caused by incorrect ARM template parameter extraction syntax. Read More →
Critical-Fix
Cisco Duo Security: Critical Deployment Fix Resolves Portal Installation Failures
Azure portal deployment failures resolved by fixing empty location parameters and updating Python runtime compatibility to prevent connector breakage. Read More →
CyberArk EPM Connector: Critical Package Fix Restores Function App Deployment
Missing .python_packages dependency added to function app package, resolving deployment failures that blocked connector installations. Read More →
Check Point Cyberint IOC Connector: Critical Data Ingestion Restoration
Cyberint threat intelligence connector restored from complete ingestion failure caused by malformed API endpoint and duplicate schema nesting blocking IOC data collection. Read More →
OCI Data Connector: Packaging Configuration Fix
Oracle Cloud Infrastructure connector package repair addresses polling configuration naming issue preventing proper deployment. Read More →
Schema Correction: MITRE ATT&CK Field Name Fix Across Multiple Solutions
Critical schema update replaces deprecated requiredTechniques field with correct relevantTechniques field in analytic rules. Read More →
Snowflake Connector: Data Ingestion Timing Fix and Parser Field Corrections
Snowflake connector updated with 120-minute ingestion delay and corrected timestamp parsing to address customer-reported data gaps. Read More →
WithSecure Elements Connector: Critical Security Fix for HTTP Decompression Vulnerabilities
WithSecure Elements connector urllib3 dependency updated to address two high-severity CVEs causing potential DoS attacks. Read More →
Box Connector: Critical Security Fix for HTTP Decompression Vulnerabilities
Box connector urllib3 dependency updated to address two high-severity CVEs causing potential DoS attacks. Read More →
GCP IAM Detection Logic Fixed — Correcting Service Account Key Detection Gaps
Two GCP IAM analytic rules had syntax errors preventing proper detection of token generation and key enumeration attacks. Read More →
Trend Micro Vision One — urllib3 Security Update Fixes Critical DoS Vulnerabilities
Dependency update from urllib3 1.26.20 to 2.6.0 addresses two high-severity CVEs preventing DoS attacks via decompression bombs and content encoding chains. Read More →
ESET Protect Platform Connector: urllib3 Security Update for CVE Fixes
Updated urllib3 dependency to v2.6.0 to address two high-severity CVEs affecting HTTP decompression handling. Read More →
Microsoft Copilot Connector — Critical Table Name Update from LLMActivity to CopilotActivity
Microsoft Copilot connector fixes critical table reference issue, standardizing on official CopilotActivity table name across all components. Read More →
Contrast ADR Detection: Fixed Field Reference Causing Query Failures
Corrected field name from incident_id_s to incidentId_s in Contrast EDR detection rule. Read More →
Slack Audit Parser: Fixed Broken Field References Causing Data Loss
Corrected field name parsing errors in SlackAuditV2_CL that were causing channel sharing status and IP context data to return null. Read More →
Proofpoint POD: Fixing WebSocket Connector to Eliminate Duplicate Data Ingestion
Removed time-based query parameters from Proofpoint On-Demand Email Security connector to prevent duplicate data ingestion caused by time rounding overlaps. Read More →
ASIM WebSession Parser: Fixed Broken Azure Firewall Template Reference
Corrected case-sensitive path reference that was preventing Azure Firewall WebSession parser deployment. Read More →
ProofPoint TAP Solution: Fixed ARM Template Validation Failures
Resolved ARM-TTK validation errors preventing ProofPoint TAP solution deployment. Read More →
AWS CloudTrail Connector: Fixed Script Logic and Command Syntax Errors
Corrected PowerShell variable scoping and AWS CLI command syntax in CloudTrail configuration script. Read More →
Critical Cloudflare Analytics Rules: Enhanced URL Entity Mapping and Repository Maintenance
P0-labeled update improves URL entity mapping in Cloudflare detection rules alongside extensive repository maintenance and validation improvements. Read More →