Vectra XDR: Log Ingestion API Migration and Enhanced API v3.4 Support with New Playbook Capabilities
Vectra XDR solution updated to API v3.4 with Log Ingestion API support, three new playbooks for PCAP download and detection management. Read More →
Parsers
Corelight: New Anomaly and First-Seen Event Parsers for Advanced Threat Detection
Corelight solution gains two new parsers for machine learning-based anomaly detection and first-seen event tracking. Read More →
Snowflake Parser: EventStartTime Field Mapping Fix and Version Update
Snowflake solution v3.0.5 corrects EventStartTime field mapping issue that was causing missing temporal data in normalized events. Read More →
GCP IAM Parser: Critical Type Handling Fix Resolves Parser Execution Failure
GCP IAM parser updated to version 3.0.7 with explicit type conversions for bool and datetime fields, fixing parser execution failures that prevented data ingestion. Read More →
Snowflake Security Detection Restoration: Critical Field Name Standardisation Fixes Query Failures
Comprehensive field name standardisation in Snowflake detection rules resolves widespread query failures caused by parser schema mismatches, restoring database activity monitoring. Read More →
QualysVM CCF Migration: Schema Update Fixes Data Parsing and Entity Mapping Failures
QualysVM solution migration to CCF connector resolves critical schema mismatches causing detection failures and incorrect entity mapping for vulnerability data. Read More →
Jamf Protect: Enhanced Parsing for New macOS Security Events and Process Audit Fields
Jamf Protect parsers updated to support TCC modifications, network connections, and pseudoterminal events plus enhanced process audit tokens. Read More →
Veeam Solution: New Backup Security Monitoring with Malware Detection and Compliance Analysis
New Veeam solution added providing comprehensive security monitoring for backup infrastructure with malware scanning, compliance analysis, and threat detection capabilities. Read More →
Zscaler Private Access Parser: Enhanced Field Coverage Improves Network Session Visibility
ZPAEvent parser updated to version 1.0.3 with additional fields for SessionID, IPProtocol, and ClientCountryCode, improving zero-trust network monitoring capabilities. Read More →