Microsoft Copilot Solution: New AI Security Monitoring with LLM Activity Telemetry

New Microsoft Copilot solution added providing AI-powered assistant usage monitoring and security telemetry through LLMActivity table ingestion via DCR framework. Read More →

GitHub Enterprise Audit Logs Connector: Critical Setup Instructions Updated

Labeled P0 — GitHub CCF connector setup instructions fixed to clarify API token scope requirements. Read More →

Jamf Protect: Enhanced Parsing for New macOS Security Events and Process Audit Fields

Jamf Protect parsers updated to support TCC modifications, network connections, and pseudoterminal events plus enhanced process audit tokens. Read More →

Snowflake Connector: Critical Data Fidelity and Reliability Improvements

Snowflake CCF connector fixed to prevent duplicate data ingestion, improve pagination handling, and reduce connection failures. Read More →

Threat Intelligence Workbook: Query Logic Fix for Indicator Visualization

Workbook query issue resolved in Threat Intelligence solution — improves analyst dashboard reliability. Read More →

NordPass Solution: Data Breach Scanner Detection Rules and Enhanced Connector Logic

Two new analytic rules detect domain and user data breaches on the dark web, with enhanced ingestion logic for NordPass Data Breach Scanner integration. Read More →

Veeam Solution: New Backup Security Monitoring with Malware Detection and Compliance Analysis

New Veeam solution added providing comprehensive security monitoring for backup infrastructure with malware scanning, compliance analysis, and threat detection capabilities. Read More →

Onapsis Defend Connectors: Broken Documentation Links Removed

Fixed connector documentation by removing non-functional links to workspace key documentation. Read More →

Threat Intelligence Connectors: ThreatIntelObjects Data Source Visibility Added

All TI data connector templates now monitor the new ThreatIntelObjects table, expanding threat intelligence visibility beyond traditional indicators. Read More →

Data Connectors: CodeQL Alert Suppression for Legacy Components

Added suppression comments for CodeQL security alerts in deprecated connectors and backward compatibility modules. Read More →

Google Cloud Platform NAT Solution: Packaging Update

GCP NAT solution packaging updated to version 3.0.1 with minor metadata revisions. Read More →

GCP Connectors Promoted to General Availability: Cloud Run, NAT, and Resource Manager

Three Google Cloud Platform CCF connectors graduate from Preview to GA status, indicating production readiness for enterprise deployment. Read More →

Threat Analysis & Response Workbook: Enhanced Visualizations and UI Improvements

Workbook update adds graphical views to complement table displays and fixes missing data source statistics headers. Read More →