WithSecure Elements Connector: Python Runtime Upgrade to 3.12
WithSecure Elements Function App connector upgraded from Python 3.10 to 3.12 to align with updated function code. Read More →
Updated
Microsoft Sentinel SOAR Playbook: Enhanced User Entity Resolution Prevents Silent Failures
Incident-Trigger-Entity-Analyzer playbook upgraded with intelligent user identifier detection, resolving silent failures when entities lack AadUserId. Read More →
Solution Analyzer v9.0: Enhanced Table Schema Discovery and Documentation Source Prioritization
Major enhancement adds comprehensive table schema extraction from DCR configs and Azure Monitor docs, plus improved discovery source hierarchy for better data source visibility. Read More →
Open Systems Connector: Enhanced Kafka Consumer Thread Configuration for Scalability
ARM template gains configurable consumer threads for each log type to address Logstash performance bottlenecks in high-volume deployments. Read More →
Gigamon AMX Connector: Migration to CCF Push Restores Network Visibility After Deprecation
Gigamon connector migrated from deprecated Log Analytics method to CCF push architecture, preventing complete loss of network traffic and threat visibility. Read More →
Cisco Duo Connector: Function Timeout Mitigation and Dependency Security Updates
Fixes timeout-induced ingestion failures in offline enrollment log processing and updates duo-client library for security maintenance. Read More →
ASIM Registry Event: Added Mandatory Fields for Microsoft 365 Defender Parser Compliance
Updated ASIM Registry Event parser for Microsoft 365 Defender to include mandatory EventSchema and EventResult fields per schema compliance requirements. Read More →
IONIX: Migration to CCF RestApiPoller with Enhanced Data Deduplication
Major migration from HTTP Data Collector API to CCF RestApiPoller enabling automatic polling with query-time deduplication for IONIX attack surface management data. Read More →
IPinfo: Multi-Workspace Support and Function App Deployment Reliability Improvements
Comprehensive update to 17 IPinfo connectors enhancing deployment reliability with runtime pinning, dependency fixes, and multi-workspace DCR support. Read More →
Solutions Analyzer Tools: Kusto Upload, CCF Legacy Support, and Parser Analysis Enhancements
Major tooling update adds Kusto integration, improves CCF connector classification, and fixes ASIM parser documentation generation. Read More →
Zscaler Internet Access: Major Platform Modernization with CloudNSS CCP Connectors
Complete solution overhaul replaces legacy connectors with 15 CloudNSS CCP connectors and 12 OAuth2 playbooks for enhanced Zscaler integration. Read More →
Microsoft Defender XDR Solution: Punycode Hunting Query Added for Lookalike Domain Detection
Microsoft Defender XDR solution v3.0.14 adds hunting query targeting Punycode character abuse in lookalike domain attacks. Read More →
Microsoft Sentinel Logstash Plugin: Passwordless Authentication with Managed Identity Support
Logstash output plugin enhanced with managed identity authentication for Azure VMs, AKS workload identity, and Azure Arc servers. Read More →
Lumen Threat Feed: V2 Connector Replaces Deprecated V1.1 with Paginated API Support
Lumen Defender Threat Feed solution updated with V2 connector using new API v3 endpoint, removing deprecated V1.1 connector entirely. Read More →
Tenable App: Enhanced Rsyslog Configuration with Source IP Filtering
Additional rsyslog configuration files added with source IP filtering capabilities to improve log collection accuracy and data connector UI guidance. Read More →
Global Secure Access: Enhanced Threat Intelligence Correlation and MCP Monitoring
New analytic rules correlate threat intelligence indicators with GSA traffic while MCP Servers Dashboard provides Model Context Protocol server monitoring. Read More →
ASIM AlertEvent: Microsoft Defender XDR Parser Enhanced with Improved Field Mappings
Microsoft Defender XDR AlertEvent parsers updated with optimized KQL logic, corrected field mappings, and enhanced IP address collection. Read More →
Solutions Analyzer: Enhanced Documentation with Lake-Only Ingestion and Statistics Features
Comprehensive documentation tool update adds lake-only ingestion tracking, collection methods index, and enhanced connector association analysis. Read More →
ASIM Sudo Authentication Parser: Schema Version 0.1.4 Compliance and Field Mapping Enhancements
ASIM sudo parser updated to schema 0.1.4 with improved field mappings, severity normalization, and code deduplication. Read More →
Oracle Cloud Infrastructure Connector: Group Cursor Support for OCI Streaming
OCI connector now supports Group Cursor mode alongside Individual Cursor for improved streaming partition consumption flexibility. Read More →