Lumen Threat Intelligence Solution: Comprehensive New Threat Feed Integration

Complete new solution with 10 analytic rules, hunting queries, workbook, and Azure Durable Function connector for Lumen threat intelligence integration. Read More →

Threat Intelligence Workbook: Query Logic Fix for Indicator Visualization

Workbook query issue resolved in Threat Intelligence solution — improves analyst dashboard reliability. Read More →

Threat Intelligence Connectors: ThreatIntelObjects Data Source Visibility Added

All TI data connector templates now monitor the new ThreatIntelObjects table, expanding threat intelligence visibility beyond traditional indicators. Read More →

Threat Intelligence DNS Detection: Alert Description Field Mapping Fix Enables Threat Context

Threat Intelligence imDns_IPEntity_DnsEvents rule updated to fix alert description field mapping from non-existent Type to ThreatType, restoring threat classification in DNS alerts. Read More →

Threat Intelligence Detection: Alert Description Field Mapping Fix Restores Dynamic Content

Threat Intelligence DomainEntity_imWebSession rule updated to fix alert description field mapping, replacing non-existent Type field with ThreatType for proper alert context. Read More →