AWS ELB Solution Moves to General Availability
AWS Elastic Load Balancer solution transitions from Public Preview to GA status, confirming production readiness for ALB/NLB access log monitoring. Read More →
DataConnectors
Valimail Enforce Solution: New Email Authentication Monitoring for DMARC/SPF/DKIM Configuration Changes
Complete Valimail Enforce monitoring solution delivers real-time detection of email authentication policy weakening and suspicious admin activity affecting domain security posture. Read More →
Halcyon Anti-Ransomware: Connector Overhaul from ASIM to OCSF Schema Architecture
Halcyon connector migrated from direct ASIM ingestion to OCSF schema with ASIM transformation parsers, replacing 5 custom tables with unified HalcyonEvents_CL table. Read More →
Cyjax Threat Intelligence Platform: Complete Solution for IOC Ingestion and Investigation
New comprehensive Microsoft Sentinel integration adds automated IOC collection, incident enrichment, and interactive threat intelligence dashboards for the Cyjax platform. Read More →
ExtraHop RevealX Connector: Function App Package Reverted to Address Customer Issues
ExtraHop connector reverted to previous function app package to resolve customer-facing deployment issues affecting data ingestion. Read More →
AWS CloudTrail Connector: Function App Crash Fix for Unsupported File Types
Fixes potential Python exception in CloudTrail ingestion function when encountering unsupported file formats, preventing data ingestion failure. Read More →
SAP ETD Cloud: User Account Correlation Now Available After Data Collection Gap
SAP ETD alerts now surface user account names and email addresses for incident correlation, filling a critical entity mapping gap that prevented effective identity-based investigations. Read More →
Dynatrace Solution: DCR Migration Introduces v2 Connectors for All Data Sources
All Dynatrace connectors migrated to DCR-based CCF architecture with dual-version parser support for seamless transitions. Read More →
AWS S3 and CEF Connectors: Security Alert Remediation Fixes Error Handling Gaps
Python connector security vulnerabilities patched with improved error handling and null check additions. Read More →
Proofpoint POD Connector: Critical Time Parameter Fix to Prevent Data Gaps
Proofpoint POD connector updated to include sinceTime parameter configuration, addressing potential data collection gaps during initial ingestion windows. Read More →
Microsoft Sentinel Logstash Plugin: Documentation Update Reveals Major Architecture Changes
Documentation updated for Logstash output plugin to reflect version 2.1.0 with Ruby-to-Java refactor, managed identity support, and closed-source transition. Read More →
Blacklens Connector: Logic App Deployment Failure Fixed
Removes unsupported secureData configuration preventing Blacklens ASM connector deployments from completing successfully. Read More →
SAP: Agentless Integration Package v1.1.10 with Security Enhancements
SAP agentless solution updated to version 1.1.10 with security and usability improvements, plus official release status designation. Read More →
Check Point Cyberint: Bi-Directional Alert Sync and Critical Data Ingestion Fix
Adds comprehensive bi-directional sync playbooks and fixes critical ref_id column type bug that caused silent data loss in alert ingestion. Read More →
Contrast ADR: CCF Connector Deployment Unlocks Application Attack Visibility
Contrast ADR adds CCF ingestion support with standardized table schemas for production-ready Application Detection and Response monitoring. Read More →
Four Legacy Azure Function Connectors Marked for Deprecation - Migration to CCF Required
Microsoft has deprecated Azure Function-based connectors for Okta SSO, SentinelOne, Sophos Endpoint Protection, and VMware Carbon Black Cloud in favor of CCF alternatives. Read More →
Function App Connectors Deprecated: Four Solutions Migrate to CCF Framework
Legacy Azure Function connectors for Atlassian Jira, Auth0, Box, and CrowdStrike are now deprecated as solutions transition to the modern CCF architecture. Read More →
BeyondTrust PM Cloud: Critical Data Ingestion Fix Restores Partial Event Visibility
A batching bug in the BeyondTrust PM Cloud connector was causing 413 errors and incomplete endpoint security event ingestion when payload sizes exceeded Log Analytics limits. Read More →
Tanium CCF Data Connector: Enhanced Endpoint Visibility with DCR-Based Ingestion
New CCF push connector for Tanium enables endpoint compliance, threat response, and patch data ingestion via DCR streams. Read More →
Vectra XDR Connector: Critical Exception Handling Bug Fixed
Exception handling bug in Vectra XDR data collector prevented proper error propagation during ingestion failures. Read More →