Recorded Future Identity Playbook: ARM Template Deploy Failure Fixed
Fixes broken deployment of RFI-confirm-EntraID-risky-user playbook that failed with InvalidTemplate error due to stale action references. Read More →
Playbooks
Vaikora AI Agent Security Monitoring for Defender for Cloud
New Vaikora solution enables real-time AI agent threat detection through automated security alert ingestion and behavioral anomaly monitoring. Read More →
Joe Sandbox Solution: ARM Template Fixes and IOC Handling Improvements
Joe Sandbox solution updated to v3.0.1 with Azure template fixes, updated storage API versions, and improved IOC processing in playbooks. Read More →
New Vaikora-CrowdStrike Integration: AI Agent Behavioral Signals to Custom IOCs
Logic App Playbook introduced to poll Vaikora AI agent signals and push high-risk actions as Custom IOCs to CrowdStrike Falcon for automated threat prevention. Read More →
Vaikora AI Security: New Logic App Playbook for SentinelOne Threat Intelligence Integration
Data443 introduces Vaikora AI agent behavioral signal integration with SentinelOne threat intelligence via a 6-hour polling playbook. Read More →
New Spur Context API Solution: High-Fidelity IP Intelligence for VPN and Proxy Detection
New solution provides real-time IP enrichment to detect VPN, residential proxy, and bot automation traffic in incidents and alerts. Read More →
SOCRadar XTI Platform: New Extended Threat Intelligence Solution Launches with Bidirectional Sync
SOCRadar XTI Platform solution now available in Content Hub with automated alarm import, incident sync, and comprehensive threat intelligence monitoring capabilities. Read More →
Cyjax Threat Intelligence Platform: Complete Solution for IOC Ingestion and Investigation
New comprehensive Microsoft Sentinel integration adds automated IOC collection, incident enrichment, and interactive threat intelligence dashboards for the Cyjax platform. Read More →
Recorded Future Identity: Prepares for Microsoft Defender Portal Migration by Deprecating Legacy Incident Creation
Recorded Future Identity solution deprecates Logic Apps-based incident creation and introduces Analytic Rules for Microsoft Defender Portal compatibility. Read More →
Recorded Future Sandbox: Enhanced Region Support and Improved Threat Intelligence Structure
Recorded Future adds sandbox region configuration parameter and moves threat intelligence evidence details to comply with STIX standard structure. Read More →
Censys Solution: New Related Infrastructure Playbook Enhances Threat Pivot Capabilities
Censys solution adds playbook and workbook for automated infrastructure pivoting and pivot analysis visualization using the Pivot Analysis API. Read More →
SAP: New Agentless User Blocking Playbook for Defender XDR Integration
New SAP playbook enables automated user blocking via Teams adaptive cards with enhanced support for complex multi-alert incidents from Microsoft Defender XDR. Read More →
Check Point Cyberint: Bi-Directional Alert Sync and Critical Data Ingestion Fix
Adds comprehensive bi-directional sync playbooks and fixes critical ref_id column type bug that caused silent data loss in alert ingestion. Read More →
Blacklens Logic App: Fixed Invalid secureData Configuration Breaking Deployment
Resolved deployment failure caused by invalid secureData configuration in Logic App Compose action. Read More →
Cyren-SentinelOne Connector: Restoring Threat Intelligence Deployment After ARM Template Failure
Critical deployment fix for Cyren-SentinelOne connector that was failing ARM template validation in Content Hub, preventing threat intelligence data ingestion. Read More →
Recorded Future: IOC Enrichment Noise Reduction via Risk Score Thresholding
Added configurable RiskScoreThreshold parameter to prevent low-risk IOCs from generating incident comments. Read More →
Cyren-SentinelOne Playbook: Credential Parameter Security Compliance Fix
Fixed Policy 300.4.1.1 violation by securing credential parameters in the Cyren-SentinelOne threat intelligence integration Playbook. Read More →
Cyren Threat Intelligence: SentinelOne IOC Automation Solution Deployed
New Content Hub solution automates IOC ingestion from Cyren CCF feeds (IP reputation and malware URLs) into SentinelOne for automated threat detection and response. Read More →
New Censys Solution: Attack Surface Intelligence and Entity Enrichment
Adds comprehensive playbook automation for Censys threat intelligence enrichment, providing IP/domain/certificate context during incident investigation. Read More →
Checkmarx Audit Log Ingestion Playbook: Security Event Monitoring Integration
New playbook for ingesting Checkmarx audit log events into Microsoft Sentinel via DCR/DCE for security event monitoring and compliance. Read More →