Documentation on sentinelchangelog.nethttp://sentinelchangelog.net/tags/documentation/Recent content in Documentation on sentinelchangelog.netHugo -- 0.157.0enMon, 01 Jun 2026 05:33:21 +0000Oracle Cloud Infrastructure CCF Connector: IAM Permissions Guidance Addedhttp://sentinelchangelog.net/posts/2026-06-01-pr-14347/Mon, 01 Jun 2026 05:33:21 +0000http://sentinelchangelog.net/posts/2026-06-01-pr-14347/OCI connector UI updated with explicit IAM policy requirements for stream consumption authorization alongside API signing key authentication.Google Threat Intelligence Solution: Custom Connector Deployment Prerequisites Clarifiedhttp://sentinelchangelog.net/posts/2026-05-27-pr-14267/Wed, 27 May 2026 06:35:46 +0000http://sentinelchangelog.net/posts/2026-05-27-pr-14267/Solution metadata updated to warn customers that Playbooks require manual deployment of the GTI custom Logic Apps connector before use.Microsoft Entra ID Table Rename: Hunting Queries Updated for Current Schemahttp://sentinelchangelog.net/posts/2026-05-18-pr-14186/Mon, 18 May 2026 05:36:36 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14186/12 hunting queries updated to use EntraIdSignInEvents and EntraIdSpnSignInEvents tables, replacing deprecated AADSignInEventsBeta and AADSpnSignInEventsBeta references.Visa Threat Intelligence: Connector Description Update for Certificationhttp://sentinelchangelog.net/posts/2026-05-05-pr-14206/Tue, 05 May 2026 16:50:36 +0000http://sentinelchangelog.net/posts/2026-05-05-pr-14206/Updated Data Connector description in Visa Threat Intelligence solution to resolve certification failure.Entra ID Brute Force Detection: Renamed for Broader Windows Device Coveragehttp://sentinelchangelog.net/posts/2026-04-30-pr-14162/Thu, 30 Apr 2026 11:04:41 +0000http://sentinelchangelog.net/posts/2026-04-30-pr-14162/Analytic rule renamed from Cloud PC-specific to cover all Entra-authenticated Windows devices, clarifying detection scope without logic changes.Logstash Output Plugin: Documentation Update for Version 2.1.1http://sentinelchangelog.net/posts/2026-04-30-pr-14164/Thu, 30 Apr 2026 08:35:40 +0000http://sentinelchangelog.net/posts/2026-04-30-pr-14164/Version bump to 2.1.1 with efficiency improvements noted but no connector logic changes.Microsoft Sentinel Logstash Plugin: Documentation Update Reveals Major Architecture Changeshttp://sentinelchangelog.net/posts/2026-04-20-pr-14084/Mon, 20 Apr 2026 06:03:15 +0000http://sentinelchangelog.net/posts/2026-04-20-pr-14084/Documentation updated for Logstash output plugin to reflect version 2.1.0 with Ruby-to-Java refactor, managed identity support, and closed-source transition.Island Enterprise Browser V2 Connector: Documentation Clarity Improvementshttp://sentinelchangelog.net/posts/2026-04-09-pr-13993/Thu, 09 Apr 2026 08:47:10 +0000http://sentinelchangelog.net/posts/2026-04-09-pr-13993/Updated Island connector titles and descriptions to reduce confusion between legacy V1 and current V2 connectors.Data Connector 64 KB Field Truncation: Silent Data Loss Risk Documentedhttp://sentinelchangelog.net/posts/2026-04-08-pr-14008/Wed, 08 Apr 2026 21:06:23 +0000http://sentinelchangelog.net/posts/2026-04-08-pr-14008/Microsoft Sentinel now documents a critical platform limitation where individual fields exceeding 64 KB are silently truncated during ingestion, creating blind spots in large payload analysis.Azure Resource Graph: Table Name Standardization for Query Consistencyhttp://sentinelchangelog.net/posts/2026-04-08-pr-13971/Wed, 08 Apr 2026 05:17:14 +0000http://sentinelchangelog.net/posts/2026-04-08-pr-13971/Azure Resource Graph connector updated table labels to align with Table Management naming conventions, ensuring consistent query references.Detection Template Validation: connectorId Enforcement Added to Review Processhttp://sentinelchangelog.net/posts/2026-04-02-pr-13959/Thu, 02 Apr 2026 07:33:15 +0000http://sentinelchangelog.net/posts/2026-04-02-pr-13959/Detection authoring guidelines now require validation of connectorId values against the official repository allowlist to prevent invalid connector references.Microsoft Copilot Connector: Updated Product Scope Descriptionhttp://sentinelchangelog.net/posts/2026-03-20-pr-13842/Fri, 20 Mar 2026 07:56:13 +0000http://sentinelchangelog.net/posts/2026-03-20-pr-13842/Clarifies connector description to specify M365 Copilot and Security Copilot coverage alongside general improvements.Google Kubernetes Engine Connector: Documentation Update Links to Official Microsoft Learnhttp://sentinelchangelog.net/posts/2026-03-01-pr-13720/Sun, 01 Mar 2026 05:27:29 +0000http://sentinelchangelog.net/posts/2026-03-01-pr-13720/Google Kubernetes Engine connector documentation updated to reference official Microsoft Learn guides instead of personal repositories.Logstash Connector: Extended Version Support for Newer Logstash Releaseshttp://sentinelchangelog.net/posts/2026-02-27-pr-13714/Fri, 27 Feb 2026 10:26:15 +0000http://sentinelchangelog.net/posts/2026-02-27-pr-13714/Documentation update adds support for Logstash versions 8.19.2, 9.0.8, 9.1.10, and 9.2.4-9.2.5.Azure Activity: Hunting Query Documentation Enhancement for Custom Script Extensionshttp://sentinelchangelog.net/posts/2026-02-26-pr-13705/Thu, 26 Feb 2026 04:54:57 +0000http://sentinelchangelog.net/posts/2026-02-26-pr-13705/Minor documentation improvement clarifying protected settings visibility in Custom Script Extension hunting query.JoeSandbox Solution: Updated Deployment Links and Removed Manual Installation Stepshttp://sentinelchangelog.net/posts/2026-02-13-pr-13623/Fri, 13 Feb 2026 11:30:47 +0000http://sentinelchangelog.net/posts/2026-02-13-pr-13623/JoeSandbox solution deployment documentation updated with corrected Azure links and streamlined automated deployment options.ASIM Authentication Schema: NetworkCleartext SubType Addedhttp://sentinelchangelog.net/posts/2026-02-12-pr-13518/Thu, 12 Feb 2026 17:55:59 +0000http://sentinelchangelog.net/posts/2026-02-12-pr-13518/ASIM Authentication schema expanded to include NetworkCleartext authentication subtype for cleartext password events.Documentation Fix: Broken Links Resolved in Microsoft Entra ID and Network Session Essentialshttp://sentinelchangelog.net/posts/2026-02-06-pr-13510/Fri, 06 Feb 2026 09:21:39 +0000http://sentinelchangelog.net/posts/2026-02-06-pr-13510/Customer-reported broken links fixed in analytic rule descriptions with corrected MITRE technique references and restored documentation.Solutions Analyzer: Enhanced Documentation with Lake-Only Ingestion and Statistics Featureshttp://sentinelchangelog.net/posts/2026-02-04-pr-13478/Wed, 04 Feb 2026 17:04:53 +0000http://sentinelchangelog.net/posts/2026-02-04-pr-13478/Comprehensive documentation tool update adds lake-only ingestion tracking, collection methods index, and enhanced connector association analysis.Azure DevOps Auditing Solution: Description Text Cleanup and Repackaginghttp://sentinelchangelog.net/posts/2026-01-22-pr-13488/Thu, 22 Jan 2026 11:11:47 +0000http://sentinelchangelog.net/posts/2026-01-22-pr-13488/Azure DevOps Auditing solution repackaged with updated description removing outdated streaming configuration text references.Microsoft Defender XDR: SUNSPOT Detection Rule Documentation Updatehttp://sentinelchangelog.net/posts/2026-01-22-pr-13485/Thu, 22 Jan 2026 11:09:59 +0000http://sentinelchangelog.net/posts/2026-01-22-pr-13485/Updated SUNSPOT malware detection rule with corrected reference link formatting and MITRE technique mapping fixes across multiple solutions.Compliance Solutions: Microsoft Exchange Product Link Rebrand Updatehttp://sentinelchangelog.net/posts/2026-01-21-pr-13341/Wed, 21 Jan 2026 05:20:24 +0000http://sentinelchangelog.net/posts/2026-01-21-pr-13341/NIST SP 800-53 and Zero Trust compliance workbooks updated with current Microsoft Defender for Office 365 documentation links following EOP rebrand.VMware ESXi Solution: Broken Link Removedhttp://sentinelchangelog.net/posts/2026-01-05-pr-13379/Mon, 05 Jan 2026 21:31:58 +0000http://sentinelchangelog.net/posts/2026-01-05-pr-13379/Documentation maintenance removing broken link from VMware ESXi solution.Microsoft Entra ID Playbooks: API Permission Updates for Session Revocationhttp://sentinelchangelog.net/posts/2025-12-15-pr-13236/Mon, 15 Dec 2025 12:07:03 +0000http://sentinelchangelog.net/posts/2025-12-15-pr-13236/Updates Revoke-AADSignInSessions playbook documentation to use correct User.RevokeSessions.All permissions instead of broader User.ReadWrite.All.AbuseIPDB Playbooks: Typo Fixes and Logo Source Updatehttp://sentinelchangelog.net/posts/2025-12-09-pr-13137/Tue, 09 Dec 2025 07:58:52 +0000http://sentinelchangelog.net/posts/2025-12-09-pr-13137/Minor documentation and configuration fixes for AbuseIPDB playbooks including corrected image source and typo corrections.Solutions Analyzer Tool: Automated Connector Documentation Generationhttp://sentinelchangelog.net/posts/2025-12-04-pr-13234/Thu, 04 Dec 2025 19:05:29 +0000http://sentinelchangelog.net/posts/2025-12-04-pr-13234/Solutions Analyzer tool enhanced to generate markdown documentation files for all 1000+ connectors in addition to CSV output.Microsoft Entra ID Assets: Fixing Product Name Typo in Data Connectorhttp://sentinelchangelog.net/posts/2025-10-29-pr-12955/Wed, 29 Oct 2025 08:22:42 +0000http://sentinelchangelog.net/posts/2025-10-29-pr-12955/Fixed typo in Microsoft Entra ID Assets connector title and updated description to use correct Microsoft Sentinel branding.VMRay: Updated Deployment URLs and Documentation for Threat Intelligence Connectorhttp://sentinelchangelog.net/posts/2025-10-13-pr-12891/Mon, 13 Oct 2025 06:01:42 +0000http://sentinelchangelog.net/posts/2025-10-13-pr-12891/VMRay solution updated deployment URLs and documentation to use short links for better maintainability.Illumio Insight Connectors: Enhanced Documentation and Polling Configurationhttp://sentinelchangelog.net/posts/2025-10-06-pr-12886/Mon, 06 Oct 2025 08:15:08 +0000http://sentinelchangelog.net/posts/2025-10-06-pr-12886/Documentation improvements and polling frequency adjustment enhance user experience for Illumio threat analysis deployment.