Function App on sentinelchangelog.nethttp://sentinelchangelog.net/tags/function-app/Recent content in Function App on sentinelchangelog.netHugo -- 0.157.0enMon, 25 May 2026 06:58:27 +0000Fortinet FortiGate Playbook: Function App Authentication Security Hardeninghttp://sentinelchangelog.net/posts/2026-05-25-pr-14316/Mon, 25 May 2026 06:58:27 +0000http://sentinelchangelog.net/posts/2026-05-25-pr-14316/Playbook Function App authentication level upgraded from anonymous to function-level to close security exposure.XBOW: API Version 2026-04-01 Upgrade Enriches Assessment Data with Attack Credits and Eventshttp://sentinelchangelog.net/posts/2026-05-20-pr-14145/Wed, 20 May 2026 06:13:05 +0000http://sentinelchangelog.net/posts/2026-05-20-pr-14145/XBOW connector upgrades to latest API version, adding attack credits tracking and recent event details to assessment ingestion for improved offensive security visibility.ESET PROTECT Platform: Delta Token Migration Eliminates Data Gaps from Timestamp Filteringhttp://sentinelchangelog.net/posts/2026-05-20-pr-14149/Wed, 20 May 2026 06:12:29 +0000http://sentinelchangelog.net/posts/2026-05-20-pr-14149/ESET connector switches from unreliable timestamp filtering to delta tokens, closing potential data loss gaps during high-volume ingestion periods.Function App Security: Access Control Hardening Across Multiple Data Connectorshttp://sentinelchangelog.net/posts/2026-05-18-pr-14284/Mon, 18 May 2026 10:00:54 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14284/Function keys now required for HTTP-triggered functions in Zoom, Zscaler, FortiGate, Cofense, Illumio, and Infoblox connectors—removing anonymous access vulnerability.Cyjax Connector: Security and Code Quality Fixes Appliedhttp://sentinelchangelog.net/posts/2026-05-07-pr-14193/Thu, 07 May 2026 07:12:52 +0000http://sentinelchangelog.net/posts/2026-05-07-pr-14193/Addressed lint issues, package vulnerabilities, and code vulnerabilities in Cyjax threat intelligence connector.Cisco Duo Connector: API Throttling Resilience Improved for Log Ingestionhttp://sentinelchangelog.net/posts/2026-05-07-pr-14204/Thu, 07 May 2026 04:48:36 +0000http://sentinelchangelog.net/posts/2026-05-07-pr-14204/Doubled retry delay to 120 seconds to address Duo API throttling requirements preventing log collection.GitHub Advanced Security Parser Migration: CLv2 Compatibility and Schema Updateshttp://sentinelchangelog.net/posts/2026-05-06-pr-14209/Wed, 06 May 2026 09:39:18 +0000http://sentinelchangelog.net/posts/2026-05-06-pr-14209/Critical fix migrates GitHub parsers and workbooks to support CLv2 ingestion table and updated GitHub alert event schemas, ensuring compatibility across V1 and V2 deployments.BloodHound Enterprise: Function App Upgrade Fixes Data Collection and Ingestion Gapshttp://sentinelchangelog.net/posts/2026-05-06-pr-13922/Wed, 06 May 2026 04:43:25 +0000http://sentinelchangelog.net/posts/2026-05-06-pr-13922/Deployment source moved to stable Microsoft repo, custom table schemas fixed, and Function App ingestion enhanced for reliable attack path visibility.Joe Sandbox Solution: ARM Template Fixes and IOC Handling Improvementshttp://sentinelchangelog.net/posts/2026-05-04-pr-14130/Mon, 04 May 2026 12:39:49 +0000http://sentinelchangelog.net/posts/2026-05-04-pr-14130/Joe Sandbox solution updated to v3.0.1 with Azure template fixes, updated storage API versions, and improved IOC processing in playbooks.CrowdStrike Falcon Data Replicator: Incorrect Deprecation Reversed, Connector Restored to Active Statushttp://sentinelchangelog.net/posts/2026-05-01-pr-14174/Fri, 01 May 2026 16:31:36 +0000http://sentinelchangelog.net/posts/2026-05-01-pr-14174/CrowdStrike’s Function App-based data replicator was incorrectly deprecated and has been restored to active status to maintain government deployment support.Upwind Connector: Function App Deployment Fixed After Broken Code Deploymenthttp://sentinelchangelog.net/posts/2026-05-01-pr-14158/Fri, 01 May 2026 06:48:48 +0000http://sentinelchangelog.net/posts/2026-05-01-pr-14158/Upwind connector Function App deployment was failing due to incorrect zip structure and ARM template configuration - fixed with flat zip layout and implicit hosting plan.GreyNoise Threat Intelligence: Packaging Fixes and Security Improvementshttp://sentinelchangelog.net/posts/2026-04-30-pr-14032/Thu, 30 Apr 2026 11:13:54 +0000http://sentinelchangelog.net/posts/2026-04-30-pr-14032/Fixed Function App deployment packaging errors and improved security by converting ARM template secrets to secure strings.GitHub Webhook V2 Connector: CLv2 Migration Ensures Continued GitHub Advanced Security Ingestionhttp://sentinelchangelog.net/posts/2026-04-27-pr-14111/Mon, 27 Apr 2026 15:15:18 +0000http://sentinelchangelog.net/posts/2026-04-27-pr-14111/New CLv2-based GitHub Webhook connector replaces deprecated CLv1 API to maintain ingestion of code scanning, Dependabot, and secret scanning alerts.Cyjax Threat Intelligence Platform: Complete Solution for IOC Ingestion and Investigationhttp://sentinelchangelog.net/posts/2026-04-22-pr-13902/Wed, 22 Apr 2026 09:06:53 +0000http://sentinelchangelog.net/posts/2026-04-22-pr-13902/New comprehensive Microsoft Sentinel integration adds automated IOC collection, incident enrichment, and interactive threat intelligence dashboards for the Cyjax platform.ExtraHop RevealX Connector: Function App Package Reverted to Address Customer Issueshttp://sentinelchangelog.net/posts/2026-04-21-pr-14105/Tue, 21 Apr 2026 12:54:13 +0000http://sentinelchangelog.net/posts/2026-04-21-pr-14105/ExtraHop connector reverted to previous function app package to resolve customer-facing deployment issues affecting data ingestion.AWS CloudTrail Connector: Function App Crash Fix for Unsupported File Typeshttp://sentinelchangelog.net/posts/2026-04-21-pr-14104/Tue, 21 Apr 2026 11:12:13 +0000http://sentinelchangelog.net/posts/2026-04-21-pr-14104/Fixes potential Python exception in CloudTrail ingestion function when encountering unsupported file formats, preventing data ingestion failure.AWS S3 and CEF Connectors: Security Alert Remediation Fixes Error Handling Gapshttp://sentinelchangelog.net/posts/2026-04-20-pr-14088/Mon, 20 Apr 2026 09:51:55 +0000http://sentinelchangelog.net/posts/2026-04-20-pr-14088/Python connector security vulnerabilities patched with improved error handling and null check additions.Four Legacy Azure Function Connectors Marked for Deprecation - Migration to CCF Requiredhttp://sentinelchangelog.net/posts/2026-04-14-pr-14073/Tue, 14 Apr 2026 21:01:38 +0000http://sentinelchangelog.net/posts/2026-04-14-pr-14073/Microsoft has deprecated Azure Function-based connectors for Okta SSO, SentinelOne, Sophos Endpoint Protection, and VMware Carbon Black Cloud in favor of CCF alternatives.Function App Connectors Deprecated: Four Solutions Migrate to CCF Frameworkhttp://sentinelchangelog.net/posts/2026-04-14-pr-14063/Tue, 14 Apr 2026 17:55:27 +0000http://sentinelchangelog.net/posts/2026-04-14-pr-14063/Legacy Azure Function connectors for Atlassian Jira, Auth0, Box, and CrowdStrike are now deprecated as solutions transition to the modern CCF architecture.BeyondTrust PM Cloud: Critical Data Ingestion Fix Restores Partial Event Visibilityhttp://sentinelchangelog.net/posts/2026-04-14-pr-14031/Tue, 14 Apr 2026 06:39:46 +0000http://sentinelchangelog.net/posts/2026-04-14-pr-14031/A batching bug in the BeyondTrust PM Cloud connector was causing 413 errors and incomplete endpoint security event ingestion when payload sizes exceeded Log Analytics limits.ExtraHop RevealX: Azure Monitor Logs Ingestion API Replaces Legacy HTTP Data Collectorhttp://sentinelchangelog.net/posts/2026-04-10-pr-13886/Fri, 10 Apr 2026 06:41:14 +0000http://sentinelchangelog.net/posts/2026-04-10-pr-13886/Added Log Ingestion API support with OAuth 2.0 authentication — modernizes data ingestion from legacy HTTP Data Collector API.Trend Micro Vision One Connector: South Africa Region Support Addedhttp://sentinelchangelog.net/posts/2026-04-09-pr-14009/Thu, 09 Apr 2026 08:47:50 +0000http://sentinelchangelog.net/posts/2026-04-09-pr-14009/Added South Africa (za) regional API endpoint support, expanding global deployment coverage for Trend Micro Vision One data ingestion.Cisco Umbrella Connector: Critical Fix for State Manager Corruption and Data Ingestion Crasheshttp://sentinelchangelog.net/posts/2026-03-25-pr-13899/Wed, 25 Mar 2026 17:53:34 +0000http://sentinelchangelog.net/posts/2026-03-25-pr-13899/Cisco Umbrella connector fixes critical null-byte corruption in Azure File Share state markers that was causing complete ingestion failures.IPinfo Connectors: Azure Functions Dependency Fix for Linux Runtimehttp://sentinelchangelog.net/posts/2026-03-24-pr-13875/Tue, 24 Mar 2026 10:39:04 +0000http://sentinelchangelog.net/posts/2026-03-24-pr-13875/All IPinfo connector Azure Function packages rebuilt to resolve dependency issues with Linux runtime.Commvault Security IQ: Enhanced Threat Scan Event Coverage and Parser Fixhttp://sentinelchangelog.net/posts/2026-03-24-pr-13869/Tue, 24 Mar 2026 10:38:30 +0000http://sentinelchangelog.net/posts/2026-03-24-pr-13869/Two new threat scan event types added to ingestion with regex fix for PascalCase field extraction.Illumio Connector: Enhanced Security with Managed Identity Authenticationhttp://sentinelchangelog.net/posts/2026-03-24-pr-13691/Tue, 24 Mar 2026 10:02:51 +0000http://sentinelchangelog.net/posts/2026-03-24-pr-13691/Illumio Function App connector replaces DefaultAzureCredential with ManagedIdentityCredential, eliminating client secret exposure.GreyNoise Threat Intelligence: SDK Update Addresses Function App Runtime Issueshttp://sentinelchangelog.net/posts/2026-03-23-pr-13819/Mon, 23 Mar 2026 09:47:58 +0000http://sentinelchangelog.net/posts/2026-03-23-pr-13819/Updated GreyNoise Python SDK to v3.0.3, fixed module mismatches, and bumped Azure Functions runtime to resolve connector stability issues.Upwind Cloud Security: New Data Connector Unlocks Cloud Asset Visibilityhttp://sentinelchangelog.net/posts/2026-03-23-pr-13778/Mon, 23 Mar 2026 06:38:23 +0000http://sentinelchangelog.net/posts/2026-03-23-pr-13778/New Upwind solution enables ingestion of compute platform assets with risk assessments, vulnerability data, and network exposure metrics.CrowdStrike Adversary Intelligence Connector: Function App Deployment Fixhttp://sentinelchangelog.net/posts/2026-03-20-pr-13864/Fri, 20 Mar 2026 07:22:38 +0000http://sentinelchangelog.net/posts/2026-03-20-pr-13864/Version constraint fix restores Function App deployment after Azure Functions runtime compatibility issue.CyberArk Audit Connector: Enhanced Documentation and Deployment Warningshttp://sentinelchangelog.net/posts/2026-03-18-pr-13755/Wed, 18 Mar 2026 12:30:25 +0000http://sentinelchangelog.net/posts/2026-03-18-pr-13755/Function App connector updated with critical migration disclaimers to prevent dual-deployment data duplication.Semperis Lightning: New Active Directory Security Monitoring Platform Added to Content Hubhttp://sentinelchangelog.net/posts/2026-03-17-pr-13719/Tue, 17 Mar 2026 14:36:30 +0000http://sentinelchangelog.net/posts/2026-03-17-pr-13719/Semperis Lightning connector brings comprehensive Active Directory tier-0 attack path monitoring and privileged access visibility to Microsoft Sentinel via real-time API ingestion.IPinfo Data Connectors: Critical Function App Runtime Fix for Production Deploymenthttp://sentinelchangelog.net/posts/2026-03-17-pr-13824/Tue, 17 Mar 2026 05:08:31 +0000http://sentinelchangelog.net/posts/2026-03-17-pr-13824/Azure Functions were completely non-functional for marketplace deployments due to incorrect zip folder structure preventing runtime from locating host.json.Cisco Umbrella Connector: Critical CSV Ingestion Failure Fixedhttp://sentinelchangelog.net/posts/2026-03-13-pr-13818/Fri, 13 Mar 2026 17:27:17 +0000http://sentinelchangelog.net/posts/2026-03-13-pr-13818/Resolves complete ingestion stall caused by oversized CSV fields and null character parsing errors.XBOW Autonomous Security Platform: Function App Connector and Detection Ruleshttp://sentinelchangelog.net/posts/2026-03-13-pr-13772/Fri, 13 Mar 2026 08:04:28 +0000http://sentinelchangelog.net/posts/2026-03-13-pr-13772/New XBOW solution provides asset inventory, vulnerability finding correlation, and automated security assessment visibility through Function App ingestion and four analytic rules.Commvault Connector: Migration from Legacy Sentinel API to Modern Logs Ingestion Architecturehttp://sentinelchangelog.net/posts/2026-03-11-pr-13703/Wed, 11 Mar 2026 09:11:08 +0000http://sentinelchangelog.net/posts/2026-03-11-pr-13703/Commvault Security IQ connector migrated from deprecated Log Analytics API to Azure Monitor Logs Ingestion API with DCE/DCR architecture.IPinfo Solution: Three New Data Connectors with Enhanced OAuth Authenticationhttp://sentinelchangelog.net/posts/2026-03-10-pr-13734/Tue, 10 Mar 2026 08:17:23 +0000http://sentinelchangelog.net/posts/2026-03-10-pr-13734/IPinfo v3.0.3 adds Core, Plus, and Residential Proxy data connectors with robust Azure AD OAuth exception handling to prevent authentication blind spots.AWS Athena Function App: Resolving Extension Bundle Compatibility and Query Result Parsinghttp://sentinelchangelog.net/posts/2026-03-10-pr-13648/Tue, 10 Mar 2026 06:57:45 +0000http://sentinelchangelog.net/posts/2026-03-10-pr-13648/AWS Athena Function App connector updated to Azure Functions v4+ bundle and fixed Python query parsing logic that previously failed on empty result data.Feedly Threat Intelligence: Migration from Azure Functions to Native CCF Connectorhttp://sentinelchangelog.net/posts/2026-03-09-pr-13748/Mon, 09 Mar 2026 06:16:39 +0000http://sentinelchangelog.net/posts/2026-03-09-pr-13748/Modernizes Feedly threat intelligence ingestion by removing Azure Function dependencies and migrating to native Sentinel CCF polling for IoC feeds.CyeraDSPM Connector: Eliminates Legacy Azure Functions Deployment Pathhttp://sentinelchangelog.net/posts/2026-03-09-pr-13768/Mon, 09 Mar 2026 05:57:04 +0000http://sentinelchangelog.net/posts/2026-03-09-pr-13768/Removes deprecated Azure Functions connector from CyeraDSPM solution, streamlining to single CCF-based ingestion to prevent marketplace deployment failures.Dataminr Pulse Connector: Extension Bundle Updated to Prevent Deployment Failureshttp://sentinelchangelog.net/posts/2026-03-06-pr-13725/Fri, 06 Mar 2026 05:04:24 +0000http://sentinelchangelog.net/posts/2026-03-06-pr-13725/Function App extension bundle upgraded from deprecated v3 to v4 to restore connector deployment capability.CTM360 HackerView: Connector Ingestion Restored After Complete Deployment Failurehttp://sentinelchangelog.net/posts/2026-03-05-pr-13423/Thu, 05 Mar 2026 08:16:49 +0000http://sentinelchangelog.net/posts/2026-03-05-pr-13423/CTM360 HackerView Function App connector was completely broken due to backup flag logic errors, preventing all threat intelligence ingestion until this fix.WithSecure Elements Connector: Python Runtime Upgrade to 3.12http://sentinelchangelog.net/posts/2026-03-05-pr-13708/Thu, 05 Mar 2026 06:11:49 +0000http://sentinelchangelog.net/posts/2026-03-05-pr-13708/WithSecure Elements Function App connector upgraded from Python 3.10 to 3.12 to align with updated function code.Cisco Duo Connector: Function Timeout Mitigation and Dependency Security Updateshttp://sentinelchangelog.net/posts/2026-03-02-pr-13713/Mon, 02 Mar 2026 07:59:57 +0000http://sentinelchangelog.net/posts/2026-03-02-pr-13713/Fixes timeout-induced ingestion failures in offline enrollment log processing and updates duo-client library for security maintenance.IPinfo: Multi-Workspace Support and Function App Deployment Reliability Improvementshttp://sentinelchangelog.net/posts/2026-02-27-pr-13630/Fri, 27 Feb 2026 05:00:55 +0000http://sentinelchangelog.net/posts/2026-02-27-pr-13630/Comprehensive update to 17 IPinfo connectors enhancing deployment reliability with runtime pinning, dependency fixes, and multi-workspace DCR support.Trend Micro Vision One: Azure Storage Account TLS Security Hardeninghttp://sentinelchangelog.net/posts/2026-02-26-pr-13697/Thu, 26 Feb 2026 10:01:38 +0000http://sentinelchangelog.net/posts/2026-02-26-pr-13697/Critical security hardening update enforces minimum TLS 1.2 for Azure storage accounts in Function App deployment template.JoeSandbox Solution: Updated Deployment Links and Removed Manual Installation Stepshttp://sentinelchangelog.net/posts/2026-02-13-pr-13623/Fri, 13 Feb 2026 11:30:47 +0000http://sentinelchangelog.net/posts/2026-02-13-pr-13623/JoeSandbox solution deployment documentation updated with corrected Azure links and streamlined automated deployment options.Lumen Threat Feed: V2 Connector Replaces Deprecated V1.1 with Paginated API Supporthttp://sentinelchangelog.net/posts/2026-02-12-pr-13575/Thu, 12 Feb 2026 20:25:13 +0000http://sentinelchangelog.net/posts/2026-02-12-pr-13575/Lumen Defender Threat Feed solution updated with V2 connector using new API v3 endpoint, removing deprecated V1.1 connector entirely.Cisco Duo Security: Critical Deployment Fix Resolves Portal Installation Failureshttp://sentinelchangelog.net/posts/2026-02-05-pr-13532/Thu, 05 Feb 2026 14:59:57 +0000http://sentinelchangelog.net/posts/2026-02-05-pr-13532/Azure portal deployment failures resolved by fixing empty location parameters and updating Python runtime compatibility to prevent connector breakage.New Solution: TacitRed Defender Threat Intelligence Integrationhttp://sentinelchangelog.net/posts/2026-02-04-pr-13266/Wed, 04 Feb 2026 13:05:23 +0000http://sentinelchangelog.net/posts/2026-02-04-pr-13266/Official TacitRed Defender TI solution from Data443 enables automated sync of compromised credentials to Microsoft Defender Threat Intelligence.CyberArk EPM Connector: Critical Package Fix Restores Function App Deploymenthttp://sentinelchangelog.net/posts/2026-02-04-pr-13527/Wed, 04 Feb 2026 05:23:27 +0000http://sentinelchangelog.net/posts/2026-02-04-pr-13527/Missing .python_packages dependency added to function app package, resolving deployment failures that blocked connector installations.