AWS S3 Connector: Python Runtime Upgrade and Boto3 Compatibility Fix
Function App connector updated to Python 3.11 with boto3 fix for missing CommonPrefixes handling. Read More →
Updated
Rubrik Security Cloud: API Hostname Configuration Update for Customer Deployments
Rubrik Security Cloud solution updated to v3.5.1 with corrected API hostname defaults across all playbooks and custom connector. Read More →
Mimecast Connectors: Migration to Log Ingestion API Eliminates Legacy Workspace Key Dependency
Mimecast Function App connectors migrated from legacy Log Analytics ingestion to Azure Monitor Log Ingestion API, requiring DCR reconfiguration. Read More →
UEBA Essentials: Enhanced Multi-Cloud Detection with 6 New AWS, GCP & Okta Hunting Queries
Major update adds comprehensive multi-cloud anomaly detection capabilities across AWS, GCP, and Okta platforms with 6 new hunting queries. Read More →
Vectra XDR: Log Ingestion API Migration and Enhanced API v3.4 Support with New Playbook Capabilities
Vectra XDR solution updated to API v3.4 with Log Ingestion API support, three new playbooks for PCAP download and detection management. Read More →
CrowdStrike Falcon: Enhanced Threat Intelligence Connector with Improved Error Handling
Updated CrowdStrike Falcon Adversary Intelligence connector with better configuration validation, error handling, and code quality improvements. Read More →
Cisco Meraki Connector: Data Types Table Name Corrected for Query Consistency
Cisco Meraki connector fixed incorrect table name reference in UI data types to match actual KQL queries. Read More →
CyberArk Audit Security Update: CVE-2024-47081 Fix Plus Multi-Solution Maintenance
Critical security update for CyberArk Audit requests library addressing credential leak vulnerability, plus comprehensive updates across 8 solutions. Read More →
Lumen Threat Feed Solution: Enhanced Delta Sync and Performance Improvements
Lumen Defender Threat Feed updated to v3.1.0 with migrated delta sync polling logic and improved workbook functionality. Read More →
CyberArk Audit: Enhanced Detection Rules with Custom Data Field Analysis
CyberArk Audit solution updated with improved analytics rules leveraging custom data fields for better privileged access monitoring. Read More →
Tenable App Connector: Adding Azure Government Cloud Support
Tenable App connector now supports Azure Government Cloud deployments with updated authentication and deployment options. Read More →
GitHub Connector: Adding Enterprise Cloud Data Residency Support
GitHub connector now supports GHEC with data residency and fixes Azure storage initialization issues. Read More →
MongoDB Atlas Connector: Multi-Cluster Support and Performance Improvements
MongoDB Atlas solution updated to support multiple cluster ingestion with performance improvements and extensive hunting query additions. Read More →
Multi-Solution Update: Microsoft 365 Filters, GDPR Workbook Enhancements, and New BigID Solution
Major update spanning 15+ solutions adds Microsoft 365 filters, GDPR workbook improvements, new BigID DSPM solution, and Netskope v2 with comprehensive parsers. Read More →
SailPoint IdentityNow Function App: Python 3.11 Upgrade and API Endpoint Updates
SailPoint IdentityNow connector upgraded to Python 3.11 runtime with updated API endpoints for Identity Security Cloud transition. Read More →
Snowflake Parser: EventStartTime Field Mapping Fix and Version Update
Snowflake solution v3.0.5 corrects EventStartTime field mapping issue that was causing missing temporal data in normalized events. Read More →
Palo Alto Prisma Cloud CSPM: Solution Graduates from Preview to General Availability
Palo Alto Prisma Cloud CSPM solution v3.0.3 moves to GA, removing preview tag and deprecated Function App connector in favor of CCF-only deployment. Read More →
Multiple Solution Updates: GKE GA Promotion and SAP ETD Investigation Capability
Google Kubernetes Engine connector promoted to GA while SAP ETD Cloud gains investigation data ingestion and enhanced detection coverage. Read More →
SAP ETD Cloud: Investigations Data Source Added for Enhanced Threat Tracking
SAP Enterprise Threat Detection solution expands with new Investigations connector, providing comprehensive investigation tracking and correlation capabilities. Read More →
Network Session Anomaly Detection: Simplified EPS Threshold Logic
Two network session analytic rules updated with unified EPS threshold and simplified query logic for improved maintainability. Read More →