Sample Data on sentinelchangelog.nethttp://sentinelchangelog.net/tags/sample-data/Recent content in Sample Data on sentinelchangelog.netHugo -- 0.157.0enTue, 30 Jun 2026 22:04:57 +0000New ASIM NetworkSession Parser for Cisco FTD Extends Network Visibility via AMA Connectorhttp://sentinelchangelog.net/posts/2026-06-30-pr-14569/Tue, 30 Jun 2026 22:04:57 +0000http://sentinelchangelog.net/posts/2026-06-30-pr-14569/Cisco Firepower Threat Defense (FTD) logs ingested via the Cisco ASA/FTD AMA connector can now be normalised into the ASIM NetworkSession schema, enabling source-agnostic detections and hunting queries to run against FTD firewall and IDS events.Salesforce Service Cloud ASIM Authentication Parser: Extended to Cover CCF V2/V3 Connector Tableshttp://sentinelchangelog.net/posts/2026-06-26-pr-14215/Fri, 26 Jun 2026 17:34:38 +0000http://sentinelchangelog.net/posts/2026-06-26-pr-14215/The ASIM Authentication parser for Salesforce Service Cloud now normalises logs from the V2 and V3 CCF connector tables – environments using the updated codeless connectors were previously producing zero normalised authentication events.New ASIM AlertEvent Parser for Google SecOps Extends Normalised Detection Coveragehttp://sentinelchangelog.net/posts/2026-06-23-pr-14221/Tue, 23 Jun 2026 21:29:46 +0000http://sentinelchangelog.net/posts/2026-06-23-pr-14221/A new ASIM AlertEvent parser pair normalises Google SecOps Detection Alerts from the DetectionAlerts_CL custom table into the ASIM AlertEvent schema, enabling source-agnostic alert hunting and cross-platform detection rules against Google SecOps data.New ASIM WebSession Parser Brings AWS WAF Traffic into Normalized Detection Coveragehttp://sentinelchangelog.net/posts/2026-06-22-pr-14496/Mon, 22 Jun 2026 21:57:23 +0000http://sentinelchangelog.net/posts/2026-06-22-pr-14496/AWS WAF web session logs can now be ingested and normalized via the ASIM WebSession schema, enabling source-agnostic detections against WAF allow/block/challenge/captcha decisions from the AWSWAF table.CrowdStrike Falcon AlertEvent ASIM Parser: Falcon Detections Now Normalised into Unified Alert Schemahttp://sentinelchangelog.net/posts/2026-06-19-pr-14488/Fri, 19 Jun 2026 23:45:23 +0000http://sentinelchangelog.net/posts/2026-06-19-pr-14488/A new ASIM AlertEvent parser for CrowdStrike Falcon ingested via CCF normalises detection data from the CrowdStrikeDetections table into the ASIM AlertEvent schema, enabling source-agnostic detection and hunting queries across EDR alert data.Google Threat Intelligence: New GTI Relevance System Alerts Connector and Six Bundled Detectionshttp://sentinelchangelog.net/posts/2026-06-19-pr-14415/Fri, 19 Jun 2026 11:27:14 +0000http://sentinelchangelog.net/posts/2026-06-19-pr-14415/A new Function App-based data connector ingests Google Threat Intelligence Relevance System Alerts into Sentinel, unlocking six new Analytic Rules that fire on high-severity, data-leak, initial access broker, and insider threat alert categories surfaced by the GTI platform.Netskope Security Cloud Joins ASIM AlertEvent Schema — Threats Now Normalised from NetskopeAlerts_CLhttp://sentinelchangelog.net/posts/2026-06-17-pr-14493/Wed, 17 Jun 2026 18:29:45 +0000http://sentinelchangelog.net/posts/2026-06-17-pr-14493/A new ASIM AlertEvent parser for Netskope Security Cloud normalises DLP, malware, C2, IPS, compromised credential, UBA, and policy alerts from the NetskopeAlerts_CL table into the standard AlertEvent schema, enabling source-agnostic detections and hunting across Netskope data.Google SecOps Integration: New Detection Pipeline Connects Chronicle to Sentinelhttp://sentinelchangelog.net/posts/2026-06-12-pr-14200/Fri, 12 Jun 2026 07:00:27 +0000http://sentinelchangelog.net/posts/2026-06-12-pr-14200/Microsoft Sentinel gains visibility into Google Chronicle security detections through new connector and parsers.Salesforce Service Cloud: New ASIM WebSession Parser Enables Normalized API/Web Request Monitoringhttp://sentinelchangelog.net/posts/2026-06-09-pr-14424/Tue, 09 Jun 2026 20:35:40 +0000http://sentinelchangelog.net/posts/2026-06-09-pr-14424/ASIM WebSession parser for Salesforce Service Cloud normalizes API and web session logs into standardized schema, enabling unified monitoring across SaaS platforms.Corelight: Dashboard Restructure and New Asset Classification Tab for Enhanced Network Visibilityhttp://sentinelchangelog.net/posts/2026-06-05-pr-14275/Fri, 05 Jun 2026 05:39:27 +0000http://sentinelchangelog.net/posts/2026-06-05-pr-14275/Corelight solution restructured workbooks and added asset classification functionality to improve network asset discovery and security monitoring capabilities.ASIM AlertEvent Support Added for Bitdefender GravityZone Security Platformhttp://sentinelchangelog.net/posts/2026-05-28-pr-13330/Thu, 28 May 2026 05:16:16 +0000http://sentinelchangelog.net/posts/2026-05-28-pr-13330/New parsers enable normalization of Bitdefender GravityZone alert data into Microsoft Sentinel ASIM schema for unified threat detection.Zimperium MTD: New CCF Push Connector for Mobile Threat Telemetryhttp://sentinelchangelog.net/posts/2026-05-08-pr-13947/Fri, 08 May 2026 06:14:13 +0000http://sentinelchangelog.net/posts/2026-05-08-pr-13947/Zimperium Mobile Threat Defense migrates to CCF-based push connector, replacing deprecated Azure Function ingestion before June 2026 deadline.Abnormal Security CCF Connector: Schema Alignment Fixes Column Visibility Gapshttp://sentinelchangelog.net/posts/2026-05-04-pr-14124/Mon, 04 May 2026 12:39:19 +0000http://sentinelchangelog.net/posts/2026-05-04-pr-14124/Abnormal Security CCF connector v3.0.1 fixes table column naming to match Microsoft Log Analytics output, restoring access to previously missing metadata fields.SOCRadar XTI Platform: New Extended Threat Intelligence Solution Launches with Bidirectional Synchttp://sentinelchangelog.net/posts/2026-04-23-pr-13858/Thu, 23 Apr 2026 05:24:37 +0000http://sentinelchangelog.net/posts/2026-04-23-pr-13858/SOCRadar XTI Platform solution now available in Content Hub with automated alarm import, incident sync, and comprehensive threat intelligence monitoring capabilities.Contrast ADR: CCF Connector Deployment Unlocks Application Attack Visibilityhttp://sentinelchangelog.net/posts/2026-04-15-pr-13954/Wed, 15 Apr 2026 04:58:02 +0000http://sentinelchangelog.net/posts/2026-04-15-pr-13954/Contrast ADR adds CCF ingestion support with standardized table schemas for production-ready Application Detection and Response monitoring.Abnormal Security: New CCF Push Connector Adds Multi-Table Email Security Event Routinghttp://sentinelchangelog.net/posts/2026-04-10-pr-13709/Fri, 10 Apr 2026 05:36:07 +0000http://sentinelchangelog.net/posts/2026-04-10-pr-13709/Added CCF Push connector with OAuth 2.0 authentication and dedicated tables for 9 event types — modern replacement for Azure Functions ingestion.Palo Alto GlobalProtect: New ASIM Authentication Parser for VPN Monitoringhttp://sentinelchangelog.net/posts/2026-04-09-pr-14012/Thu, 09 Apr 2026 16:00:52 +0000http://sentinelchangelog.net/posts/2026-04-09-pr-14012/New ASIM parser normalizes GlobalProtect VPN authentication events from CommonSecurityLog table, enabling unified monitoring of gateway and portal authentication across Palo Alto PAN-OS deployments.Microsoft Copilot Connector — Critical Table Name Update from LLMActivity to CopilotActivityhttp://sentinelchangelog.net/posts/2025-12-16-pr-13272/Tue, 16 Dec 2025 04:58:57 +0000http://sentinelchangelog.net/posts/2025-12-16-pr-13272/Microsoft Copilot connector fixes critical table reference issue, standardizing on official CopilotActivity table name across all components.ZeroFox CCF Connector: KQL Query Restoration and Multi-Solution Maintenancehttp://sentinelchangelog.net/posts/2025-12-04-pr-13209/Thu, 04 Dec 2025 10:45:58 +0000http://sentinelchangelog.net/posts/2025-12-04-pr-13209/ZeroFox CCF connector receives missing KQL query fixes alongside packaging updates across 8+ solutions.Salesforce Service Cloud Connector: Column Name Bug Fix Plus Multi-Solution Updateshttp://sentinelchangelog.net/posts/2025-11-21-pr-13150/Fri, 21 Nov 2025 08:17:44 +0000http://sentinelchangelog.net/posts/2025-11-21-pr-13150/Fixed critical column name mapping bug in Salesforce Service Cloud CCF connector preventing proper data ingestion.Zscaler ZIA ASIM Parser: Device Model Field Parsing Fix Restores Visibilityhttp://sentinelchangelog.net/posts/2025-11-18-pr-12053/Tue, 18 Nov 2025 09:44:52 +0000http://sentinelchangelog.net/posts/2025-11-18-pr-12053/ASIM WebSession parser for Zscaler ZIA corrected devicemodel parsing logic that was preventing proper device categorization.GCP Security Command Center: New Detection Suite for Cloud Misconfigurationshttp://sentinelchangelog.net/posts/2025-11-14-pr-13116/Fri, 14 Nov 2025 08:22:41 +0000http://sentinelchangelog.net/posts/2025-11-14-pr-13116/New Solution delivers 5 Analytic Rules and 5 Hunting Queries to detect GCP security misconfigurations including unrestricted API keys, disabled security features, and risky IAM configurations.Mimecast Connectors: Migration to Log Ingestion API Eliminates Legacy Workspace Key Dependencyhttp://sentinelchangelog.net/posts/2025-11-14-pr-13042/Fri, 14 Nov 2025 05:46:47 +0000http://sentinelchangelog.net/posts/2025-11-14-pr-13042/Mimecast Function App connectors migrated from legacy Log Analytics ingestion to Azure Monitor Log Ingestion API, requiring DCR reconfiguration.Multi-Solution Update: Microsoft 365 Filters, GDPR Workbook Enhancements, and New BigID Solutionhttp://sentinelchangelog.net/posts/2025-10-15-pr-12950/Wed, 15 Oct 2025 08:14:10 +0000http://sentinelchangelog.net/posts/2025-10-15-pr-12950/Major update spanning 15+ solutions adds Microsoft 365 filters, GDPR workbook improvements, new BigID DSPM solution, and Netskope v2 with comprehensive parsers.Cloudflare Connector: Security Dependency Update for aiohttp Libraryhttp://sentinelchangelog.net/posts/2025-10-06-pr-12907/Mon, 06 Oct 2025 13:18:11 +0000http://sentinelchangelog.net/posts/2025-10-06-pr-12907/aiohttp library updated from 3.10.11 to 3.12.14 in Cloudflare connector addressing potential security vulnerabilities.VirtualMetric DataStream Solution: New Multi-Path Data Ingestion Platform for Sentinelhttp://sentinelchangelog.net/posts/2025-10-03-pr-12840/Fri, 03 Oct 2025 10:11:28 +0000http://sentinelchangelog.net/posts/2025-10-03-pr-12840/New VirtualMetric DataStream solution provides comprehensive data ingestion capabilities with ASIM support and multiple deployment options for Sentinel and data lake environments.