Complete JoeSandbox solution deployment enabling automated malware analysis, threat intelligence feed ingestion, and incident enrichment playbooks for Microsoft Sentinel. Read More →
Massive new Cyble Vision solution providing 40+ specialized detection rules and parsers for diverse threat intelligence feeds from dark web to cloud security. Read More →
Updates Revoke-AADSignInSessions playbook documentation to use correct User.RevokeSessions.All permissions instead of broader User.ReadWrite.All. Read More →
Three new entity analyzer playbooks added with HTTP, URL, and incident triggers for automated URL and user entity enrichment. Read More →
Minor documentation and configuration fixes for AbuseIPDB playbooks including corrected image source and typo corrections. Read More →
Dutch National Detection Network threat intelligence sharing solution updated to v3.0.1 with playbook parameter fixes and improved JSON structure. Read More →
Rubrik Security Cloud solution updated to v3.5.1 with corrected API hostname defaults across all playbooks and custom connector. Read More →
Vectra XDR solution updated to API v3.4 with Log Ingestion API support, three new playbooks for PCAP download and detection management. Read More →
Fixed template error in TeamCymruScoutEnrichIncident playbook that was causing runtime failures. Read More →
Custom connector updated with filter query parameters for more targeted threat intelligence retrieval. Read More →
Critical fix for Tanium quarantine/unquarantine playbooks resolves API failures caused by improper URL encoding of package names containing special characters. Read More →
Playbook deployment instructions updated to use Microsoft Graph SDK replacing deprecated AzureAD cmdlets. Read More →
MDTI playbooks updated to use managed identity authentication and Graph API v1.0 — eliminates client secret management. Read More →
Tanium playbooks updated with Azure Key Vault integration for API token security and improved alert naming to resolve grouping issues. Read More →
New playbook automatically educates users who failed to report phishing emails by triggering Attack Simulator training simulations. Read More →
New Veeam solution added providing comprehensive security monitoring for backup infrastructure with malware scanning, compliance analysis, and threat detection capabilities. Read More →