Lumen Threat Feed: V2 Connector Replaces Deprecated V1.1 with Paginated API Support
Lumen Defender Threat Feed solution updated with V2 connector using new API v3 endpoint, removing deprecated V1.1 connector entirely. Read More →
Solutions
Tenable App: Enhanced Rsyslog Configuration with Source IP Filtering
Additional rsyslog configuration files added with source IP filtering capabilities to improve log collection accuracy and data connector UI guidance. Read More →
Documentation Fix: Broken Links Resolved in Microsoft Entra ID and Network Session Essentials
Customer-reported broken links fixed in analytic rule descriptions with corrected MITRE technique references and restored documentation. Read More →
Global Secure Access: Enhanced Threat Intelligence Correlation and MCP Monitoring
New analytic rules correlate threat intelligence indicators with GSA traffic while MCP Servers Dashboard provides Model Context Protocol server monitoring. Read More →
SAP Solution: Agentless Integration Suite Tooling Added for Enhanced ERP Connectivity
New PowerShell tooling enables agentless SAP data collection via Integration Suite with dual-mode credentials and CSV-based destination management. Read More →
Cisco Duo Security: Critical Deployment Fix Resolves Portal Installation Failures
Azure portal deployment failures resolved by fixing empty location parameters and updating Python runtime compatibility to prevent connector breakage. Read More →
New Solution: meshStack Platform Event Logs Integration for Cloud Governance
meshStack event logging connector enables cloud platform governance monitoring by ingesting developer platform events into Microsoft Sentinel. Read More →
New Solution: TacitRed Defender Threat Intelligence Integration
Official TacitRed Defender TI solution from Data443 enables automated sync of compromised credentials to Microsoft Defender Threat Intelligence. Read More →
TacitRed SentinelOne Solution: Partner Center Metadata Alignment and Template Fixes
TacitRed SentinelOne solution metadata updated for Partner Center alignment with ARM template variable corrections. Read More →
TacitRed Threat Intelligence Solution: Partner Center Metadata Alignment
TacitRed solution metadata updated for Partner Center publisherId.offerId alignment. Read More →
CyberArk EPM Connector: Critical Package Fix Restores Function App Deployment
Missing .python_packages dependency added to function app package, resolving deployment failures that blocked connector installations. Read More →
Oracle Cloud Infrastructure Connector: Group Cursor Support for OCI Streaming
OCI connector now supports Group Cursor mode alongside Individual Cursor for improved streaming partition consumption flexibility. Read More →
Rapid7 InsightVM Data Connector: Azure Functions Extension Bundle Upgrade to 4.x
Rapid7 InsightVM Function App connector updated to use latest 4.x Azure Functions extension bundles from deprecated 3.x version. Read More →
Microsoft Defender XDR: New Hunting Query for Punycode Lookalike Domain Phishing
Advanced hunting query detects punycode domains using Cyrillic, Greek, and fullwidth ASCII characters to visually impersonate legitimate domains in email and Teams. Read More →
Snowflake Multiple Failed Queries Detection: Fixed False Positives from Load Operations
Snowflake detection rule now filters out events lacking QueryExecutionStatus to prevent false alerts from data loading operations. Read More →
OAuth Data Connectors: Dynamic Redirect URI Support Simplifies Authentication Setup
Four OAuth-based data connectors now support dynamic redirect URIs, eliminating manual Azure portal configuration requirements. Read More →
GitHub Enterprise Cloud Connector: Audit Log Data Ingestion Now Generally Available
GitHub Enterprise audit log connector and 11 accompanying detection rules promoted from Preview to GA status. Read More →
Versasec CMS Solution: Publishing Configuration Updates
Versasec CMS solution packaging updated to meet Content Hub publishing requirements. Read More →
BigID DSPM: P0 ARM Template Fix Addresses Deployment Failure
ARM template toolkit validation failure resolved by centralizing hardcoded step identifiers into reusable variables. Read More →
BeyondTrust PM Cloud: Workbook Preview Image Standardization
Renamed BeyondTrust PM Cloud workbook preview images from Dark/Light to Black/White convention and added BeyondTrust logo asset for UI consistency. Read More →