AWS Athena Function App: Resolving Extension Bundle Compatibility and Query Result Parsing

AWS Athena Function App connector updated to Azure Functions v4+ bundle and fixed Python query parsing logic that previously failed on empty result data. Read More →

Feedly Threat Intelligence: Migration from Azure Functions to Native CCF Connector

Modernizes Feedly threat intelligence ingestion by removing Azure Function dependencies and migrating to native Sentinel CCF polling for IoC feeds. Read More →

CyeraDSPM Connector: Eliminates Legacy Azure Functions Deployment Path

Removes deprecated Azure Functions connector from CyeraDSPM solution, streamlining to single CCF-based ingestion to prevent marketplace deployment failures. Read More →

CrowdStrike API Connector: Critical Fix Restores Full Alert and Detection Data Ingestion

CrowdStrike API connector fix implements nested API calls to retrieve complete alert/detection details after prior version only captured alert IDs. Read More →

Dataminr Pulse Connector: Extension Bundle Updated to Prevent Deployment Failures

Function App extension bundle upgraded from deprecated v3 to v4 to restore connector deployment capability. Read More →

TacitRed CrowdStrike Playbook: Authentication Fix for Multi-Region API Endpoints

Fixed hardcoded CrowdStrike API URL default causing authentication failures for customers in US-1 and EU-1 regions. Read More →

TacitRed SentinelOne Playbook: Critical API Fix Restores IOC Automation After HTTP 500 Failures

Fixed broken TacitRed playbook that was failing with HTTP 500 errors when posting IOCs to SentinelOne due to missing account scope parameter. Read More →

TheHive Incident Response: New CCF Connector for SOAR Platform Integration

Microsoft Sentinel gains native ingestion from TheHive security incident response platform via CCF connector, enabling case management visibility and response workflow correlation. Read More →

Cyera DSPM Connector: Critical DCR Transform Fix Restores Asset Visibility After KQL Function Errors

Cyera DSPM connector v3.0.4 fixes DCR transformation failures that prevented data ingestion, restoring visibility into cloud asset security posture and compliance. Read More →

CTM360 HackerView: Connector Ingestion Restored After Complete Deployment Failure

CTM360 HackerView Function App connector was completely broken due to backup flag logic errors, preventing all threat intelligence ingestion until this fix. Read More →

WithSecure Elements Connector: Python Runtime Upgrade to 3.12

WithSecure Elements Function App connector upgraded from Python 3.10 to 3.12 to align with updated function code. Read More →

Microsoft Sentinel SOAR Playbook: Enhanced User Entity Resolution Prevents Silent Failures

Incident-Trigger-Entity-Analyzer playbook upgraded with intelligent user identifier detection, resolving silent failures when entities lack AadUserId. Read More →

Rapid7 InsightVM: New CCF Connector Expands Vulnerability Management Data Ingestion Options

Rapid7InsightVM solution adds CCF-based data connector for cloud-native ingestion alongside legacy Function App connector, enhancing deployment flexibility for vulnerability management visibility. Read More →

Versasec CMS: Microsoft API Version Update for SavedSearches

Microsoft updated the SavedSearches API version in the Versasec CMS solution packaging. Read More →

Open Systems Connector: Enhanced Kafka Consumer Thread Configuration for Scalability

ARM template gains configurable consumer threads for each log type to address Logstash performance bottlenecks in high-volume deployments. Read More →

CyberArk Audit: New CCF Connector Alternative Replaces Function App Dependency

CyberArk adds CCF-based connector to eliminate Azure Functions dependency for audit data ingestion. Read More →

New Trellix Endpoint Security: CCF Connector Unlocks ePO Threat Visibility in Sentinel

New solution delivers Trellix ePO endpoint security events via CCF with OAuth2 authentication and comprehensive threat intelligence data. Read More →

TacitRed-SentinelOne v3.0.2: Critical Fix for Broken SentinelOne Connection

Fixes a critical deployment bug present since v1.0.0 where hardcoded placeholder URL caused complete playbook failure for all Content Hub installations. Read More →

Gigamon AMX Connector: Migration to CCF Push Restores Network Visibility After Deprecation

Gigamon connector migrated from deprecated Log Analytics method to CCF push architecture, preventing complete loss of network traffic and threat visibility. Read More →

Cisco Duo Connector: Function Timeout Mitigation and Dependency Security Updates

Fixes timeout-induced ingestion failures in offline enrollment log processing and updates duo-client library for security maintenance. Read More →