Google Threat Intelligence: Enhanced Filtering for Threat List Queries
Custom connector updated with filter query parameters for more targeted threat intelligence retrieval. Read More →
Updated
Vectra XDR Connector: Python Runtime Upgrade and Authentication Security Fix
Vectra XDR connector upgraded to Python 3.12 and switched from DefaultAzureCredential to managed identity for production security. Read More →
SecurityBridge App Schema Update: New SecurityBridge_CL Table Enables Native SAP Log Ingestion
SecurityBridge App solution adds dedicated SecurityBridge_CL custom table with enhanced schema for native SAP security log processing via DCR. Read More →
Tanium Solution: Content Hub Preview Image Display Fix (P0)
Fixed workbook preview image metadata for proper Content Hub display across multiple solutions including Tanium. Read More →
SOC Handbook: Fixed Mean Time to Triage Calculation Logic
Security Operations Efficiency workbook query corrected to properly calculate incident triage metrics. Read More →
Continuous Diagnostics & Mitigation: Workbook Hyperlink and Metrics Fix
Fixed broken hyperlinks and metrics in the Continuous Diagnostics & Mitigation workbook. Read More →
Event Log Management Maturity Model: Fixing Broken Links and Metrics
Workbook hyperlinks and metrics restored to address navigation and display issues. Read More →
Snowflake Security Detection Restoration: Critical Field Name Standardisation Fixes Query Failures
Comprehensive field name standardisation in Snowflake detection rules resolves widespread query failures caused by parser schema mismatches, restoring database activity monitoring. Read More →
MongoDB Atlas Connector: Enhanced Log Filtering and Performance Optimization
MongoDB Atlas Function App connector receives filtering capabilities and performance improvements for more efficient log ingestion. Read More →
NIST SP 800-53 Workbook: Broken Hyperlinks and Validation Errors Fixed
NIST SP 800-53 workbook updated with corrected hyperlinks and validation fixes to restore proper functionality. Read More →
QualysVM CCF Migration: Schema Update Fixes Data Parsing and Entity Mapping Failures
QualysVM solution migration to CCF connector resolves critical schema mismatches causing detection failures and incorrect entity mapping for vulnerability data. Read More →
Microsoft Entra ID Connector: Preview Labels Removed from GA Data Types
Entra ID connector updated to remove preview designations from data types that have reached general availability. Read More →
Cybersixgill Connector: TLS and SSL Security Hardening
Cybersixgill Function App connector enforces minimum TLS 1.2 and disables public blob access to meet encryption-in-transit requirements. Read More →
Microsoft Defender Threat Intelligence: Playbooks Enhanced with Managed Identity Security
MDTI playbooks updated to use managed identity authentication and Graph API v1.0 — eliminates client secret management. Read More →
Cisco Duo Security Solution: New Log Endpoints Support Added in Version 3.0.3
Cisco Duo Security solution updated to version 3.0.3 with enhanced data ingestion capabilities through new log endpoint support. Read More →
Commvault Security IQ Authentication Security Hardening: Managed Identity and HTTPS Enforcement
Commvault Security IQ connector security improvements include managed identity authentication and removal of SSL verification bypass for enhanced security posture. Read More →
Oracle Cloud Infrastructure Connector Setup: Partition Limitation Documentation Added
Oracle Cloud Infrastructure CCP connector instructions updated to clarify single-partition limitation and provide clearer partition ID guidance. Read More →
Tanium Solution: Security Hardening for Playbook API Authentication and Alert Management
Tanium playbooks updated with Azure Key Vault integration for API token security and improved alert naming to resolve grouping issues. Read More →
Veeam Solution: Table Rename Fix for Microsoft Defender Portal Compatibility
Veeam solution updated with table rename from VeeamSession_CL to VeeamSessions_CL to ensure proper display in Microsoft Defender Portal. Read More →
Illumio Insights Enhanced: New Summary Connector and Improved Authentication
Illumio solution expands with new Insights Summary connector for compliance managers and threat hunters, plus improved API authentication structure. Read More →