T1562 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1562/Recent content in T1562 on sentinelchangelog.netHugo -- 0.157.0enThu, 21 May 2026 12:01:33 +0000CrowdStrike Content Doctor Enhancement: Improved Detection Logic and Alert Customizationhttp://sentinelchangelog.net/posts/2026-05-21-pr-14268/Thu, 21 May 2026 12:01:33 +0000http://sentinelchangelog.net/posts/2026-05-21-pr-14268/Content Doctor improvements to CrowdStrike Falcon detection rules enhancing KQL logic, MITRE mappings, and alert presentation for critical/high severity detections.AWS Content Quality Overhaul: Standardized Detection Rules and Improved Entity Mappingshttp://sentinelchangelog.net/posts/2026-05-18-pr-14101/Mon, 18 May 2026 07:30:57 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14101/Comprehensive quality improvements to 61 AWS Analytic Rules and 35 Hunting Queries with standardized naming conventions, normalized MITRE technique mappings, and updated entity field references from legacy AccountCustomEntity to UserIdentityUserName.Valimail Enforce Solution: New Email Authentication Monitoring for DMARC/SPF/DKIM Configuration Changeshttp://sentinelchangelog.net/posts/2026-04-24-pr-14045/Fri, 24 Apr 2026 05:26:39 +0000http://sentinelchangelog.net/posts/2026-04-24-pr-14045/Complete Valimail Enforce monitoring solution delivers real-time detection of email authentication policy weakening and suspicious admin activity affecting domain security posture.Check Point Cyberint: Bi-Directional Alert Sync and Critical Data Ingestion Fixhttp://sentinelchangelog.net/posts/2026-04-15-pr-13790/Wed, 15 Apr 2026 14:01:43 +0000http://sentinelchangelog.net/posts/2026-04-15-pr-13790/Adds comprehensive bi-directional sync playbooks and fixes critical ref_id column type bug that caused silent data loss in alert ingestion.Microsoft Sentinel Training Lab: Comprehensive Hands-On Security Operations Environment Now Availablehttp://sentinelchangelog.net/posts/2026-04-10-pr-13848/Fri, 10 Apr 2026 15:05:24 +0000http://sentinelchangelog.net/posts/2026-04-10-pr-13848/New deployment-ready training lab delivers 14 guided exercises with pre-recorded telemetry, detection rules, and automation workflows for practical Microsoft Sentinel skill development.Netskope Secure Web Gateway Solution: New Detection Coverage for Cloud Application Visibilityhttp://sentinelchangelog.net/posts/2026-04-03-pr-13618/Fri, 03 Apr 2026 11:24:10 +0000http://sentinelchangelog.net/posts/2026-04-03-pr-13618/New Netskope solution adds 10 detections for web transaction monitoring including impossible travel, excessive downloads, shadow IT detection, and data exfiltration patterns.Microsoft Security Copilot: Six New Detections for AI Assistant Abusehttp://sentinelchangelog.net/posts/2026-03-27-pr-13735/Fri, 27 Mar 2026 05:01:42 +0000http://sentinelchangelog.net/posts/2026-03-27-pr-13735/New analytic rules target jailbreak attempts, external access, plugin tampering, and file upload disabling - covering major AI security attack vectors.New Attack Surface Management Solution: blacklens.io Brings External Threat Visibility to Microsoft Sentinelhttp://sentinelchangelog.net/posts/2026-03-26-pr-13375/Thu, 26 Mar 2026 12:48:50 +0000http://sentinelchangelog.net/posts/2026-03-26-pr-13375/blacklens.io Attack Surface Management platform now available in Content Hub with webhook-based alert ingestion and automated incident creation.GitHub 2FA Detection Restored: Critical Blind Spot Fixed After Parser Migrationhttp://sentinelchangelog.net/posts/2026-03-20-pr-13770/Fri, 20 Mar 2026 09:23:24 +0000http://sentinelchangelog.net/posts/2026-03-20-pr-13770/GitHub Enterprise 2FA disablement detection rule was completely broken due to deprecated table reference — restored monitoring for T1562 defense impairment.VMware ESXi SSH Brute Force Detection Plus Multi-Solution Updateshttp://sentinelchangelog.net/posts/2025-11-10-pr-13063/Mon, 10 Nov 2025 06:23:07 +0000http://sentinelchangelog.net/posts/2025-11-10-pr-13063/New VMware ESXi detection for multiple failed SSH login attempts, plus comprehensive solution updates across 15+ vendor solutions.