GCP on sentinelchangelog.nethttp://sentinelchangelog.net/tags/gcp/Recent content in GCP on sentinelchangelog.netHugo -- 0.157.0enWed, 27 May 2026 06:35:46 +0000Google Threat Intelligence Solution: Custom Connector Deployment Prerequisites Clarifiedhttp://sentinelchangelog.net/posts/2026-05-27-pr-14267/Wed, 27 May 2026 06:35:46 +0000http://sentinelchangelog.net/posts/2026-05-27-pr-14267/Solution metadata updated to warn customers that Playbooks require manual deployment of the GTI custom Logic Apps connector before use.Google Directory Solution: New Playbook Integration with Extended Security Scopehttp://sentinelchangelog.net/posts/2026-05-18-pr-14273/Mon, 18 May 2026 12:09:43 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14273/Initial release of GoogleDirectory solution adds Google Workspace user security management capabilities to Microsoft Sentinel playbook automation.Microsoft Sentinel Training Lab: Comprehensive Hands-On Security Operations Environment Now Availablehttp://sentinelchangelog.net/posts/2026-04-10-pr-13848/Fri, 10 Apr 2026 15:05:24 +0000http://sentinelchangelog.net/posts/2026-04-10-pr-13848/New deployment-ready training lab delivers 14 guided exercises with pre-recorded telemetry, detection rules, and automation workflows for practical Microsoft Sentinel skill development.ASIM AssetEntity Schema: EntitySource Enumeration and EntityOriginalSource Addedhttp://sentinelchangelog.net/posts/2026-04-06-pr-13996/Mon, 06 Apr 2026 21:43:06 +0000http://sentinelchangelog.net/posts/2026-04-06-pr-13996/ASIM AssetEntity schema now enforces cloud platform enumeration and adds source traceability field.Google Workspace Reports Connector Promoted to General Availabilityhttp://sentinelchangelog.net/posts/2026-03-26-pr-13927/Thu, 26 Mar 2026 20:41:06 +0000http://sentinelchangelog.net/posts/2026-03-26-pr-13927/Google Workspace Reports CCF connector exits preview status with updated OAuth configuration guidance.Upwind Cloud Security: New Data Connector Unlocks Cloud Asset Visibilityhttp://sentinelchangelog.net/posts/2026-03-23-pr-13778/Mon, 23 Mar 2026 06:38:23 +0000http://sentinelchangelog.net/posts/2026-03-23-pr-13778/New Upwind solution enables ingestion of compute platform assets with risk assessments, vulnerability data, and network exposure metrics.Google Kubernetes Engine Connector: Documentation Update Links to Official Microsoft Learnhttp://sentinelchangelog.net/posts/2026-03-01-pr-13720/Sun, 01 Mar 2026 05:27:29 +0000http://sentinelchangelog.net/posts/2026-03-01-pr-13720/Google Kubernetes Engine connector documentation updated to reference official Microsoft Learn guides instead of personal repositories.OAuth Data Connectors: Dynamic Redirect URI Support Simplifies Authentication Setuphttp://sentinelchangelog.net/posts/2026-02-03-pr-13165/Tue, 03 Feb 2026 08:52:26 +0000http://sentinelchangelog.net/posts/2026-02-03-pr-13165/Four OAuth-based data connectors now support dynamic redirect URIs, eliminating manual Azure portal configuration requirements.Armis IoT Security Solution: Enhanced Log Ingestion and Data Collection Rule Integrationhttp://sentinelchangelog.net/posts/2025-12-26-pr-13252/Fri, 26 Dec 2025 11:47:14 +0000http://sentinelchangelog.net/posts/2025-12-26-pr-13252/Major enhancement to Armis data connectors implementing Azure Monitor Logs Ingestion API with DCR support for improved data fidelity and performance.GCP IAM Detection Logic Fixed — Correcting Service Account Key Detection Gapshttp://sentinelchangelog.net/posts/2025-12-17-pr-13323/Wed, 17 Dec 2025 08:13:41 +0000http://sentinelchangelog.net/posts/2025-12-17-pr-13323/Two GCP IAM analytic rules had syntax errors preventing proper detection of token generation and key enumeration attacks.GDPR Workbook: Expanded Asset Coverage Beyond On-Prem Hostshttp://sentinelchangelog.net/posts/2025-12-09-pr-13259/Tue, 09 Dec 2025 03:52:42 +0000http://sentinelchangelog.net/posts/2025-12-09-pr-13259/GDPR compliance workbook now monitors security alerts across Azure, AWS, GCP, and blob storage assets, not just traditional servers.Google Threat Intelligence: Enhanced Threat Hunting with MITRE ATT&CK Integrationhttp://sentinelchangelog.net/posts/2025-12-04-pr-13198/Thu, 04 Dec 2025 05:49:38 +0000http://sentinelchangelog.net/posts/2025-12-04-pr-13198/Updated threat hunting rules add MITRE ATT&CK mappings and fix parser function calls for improved threat detection coverage.GCP Security Command Center: New Detection Suite for Cloud Misconfigurationshttp://sentinelchangelog.net/posts/2025-11-14-pr-13116/Fri, 14 Nov 2025 08:22:41 +0000http://sentinelchangelog.net/posts/2025-11-14-pr-13116/New Solution delivers 5 Analytic Rules and 5 Hunting Queries to detect GCP security misconfigurations including unrestricted API keys, disabled security features, and risky IAM configurations.UEBA Essentials: Enhanced Multi-Cloud Detection with 6 New AWS, GCP & Okta Hunting Querieshttp://sentinelchangelog.net/posts/2025-11-12-pr-13065/Wed, 12 Nov 2025 11:17:58 +0000http://sentinelchangelog.net/posts/2025-11-12-pr-13065/Major update adds comprehensive multi-cloud anomaly detection capabilities across AWS, GCP, and Okta platforms with 6 new hunting queries.OneTrust Data Security Platform Connector: New Privacy and Risk Management Visibilityhttp://sentinelchangelog.net/posts/2025-10-31-pr-13007/Fri, 31 Oct 2025 08:36:47 +0000http://sentinelchangelog.net/posts/2025-10-31-pr-13007/New CCF-based connector for OneTrust enables monitoring of privacy compliance, data governance, and risk management activities in Sentinel workspaces.Multi-Solution Update: Microsoft 365 Filters, GDPR Workbook Enhancements, and New BigID Solutionhttp://sentinelchangelog.net/posts/2025-10-15-pr-12950/Wed, 15 Oct 2025 08:14:10 +0000http://sentinelchangelog.net/posts/2025-10-15-pr-12950/Major update spanning 15+ solutions adds Microsoft 365 filters, GDPR workbook improvements, new BigID DSPM solution, and Netskope v2 with comprehensive parsers.Sentinel CCF Packaging Tool: Adding JWT Token Authentication Supporthttp://sentinelchangelog.net/posts/2025-10-09-pr-12906/Thu, 09 Oct 2025 13:10:17 +0000http://sentinelchangelog.net/posts/2025-10-09-pr-12906/CCF packaging tooling now supports JWT token authentication alongside existing methods for connector development.Multiple Solutions Added: Palo Alto aiohttp Update Plus New Obsidian and SAP S4 Connectorshttp://sentinelchangelog.net/posts/2025-10-08-pr-12922/Wed, 08 Oct 2025 12:22:56 +0000http://sentinelchangelog.net/posts/2025-10-08-pr-12922/Palo Alto Prisma Cloud dependency security update alongside new Obsidian Datasharing and SAP S4 Cloud Public Edition connector solutions.Multiple Solution Updates: GKE GA Promotion and SAP ETD Investigation Capabilityhttp://sentinelchangelog.net/posts/2025-10-07-pr-12920/Tue, 07 Oct 2025 08:55:21 +0000http://sentinelchangelog.net/posts/2025-10-07-pr-12920/Google Kubernetes Engine connector promoted to GA while SAP ETD Cloud gains investigation data ingestion and enhanced detection coverage.Cloudflare Connector: Security Dependency Update for aiohttp Libraryhttp://sentinelchangelog.net/posts/2025-10-06-pr-12907/Mon, 06 Oct 2025 13:18:11 +0000http://sentinelchangelog.net/posts/2025-10-06-pr-12907/aiohttp library updated from 3.10.11 to 3.12.14 in Cloudflare connector addressing potential security vulnerabilities.Google Threat Intelligence: Enhanced Filtering for Threat List Querieshttp://sentinelchangelog.net/posts/2025-10-01-pr-12857/Wed, 01 Oct 2025 07:57:31 +0000http://sentinelchangelog.net/posts/2025-10-01-pr-12857/Custom connector updated with filter query parameters for more targeted threat intelligence retrieval.GCP IAM Parser: Critical Type Handling Fix Resolves Parser Execution Failurehttp://sentinelchangelog.net/posts/2025-09-30-pr-12714/Tue, 30 Sep 2025 10:36:03 +0000http://sentinelchangelog.net/posts/2025-09-30-pr-12714/GCP IAM parser updated to version 3.0.7 with explicit type conversions for bool and datetime fields, fixing parser execution failures that prevented data ingestion.