Workspace Usage Monitoring Enhanced with New Features and Weekly Analytics
WorkspaceUsage workbook updated to version 1.6.4 with new weekly analytics features and bug fixes to improve usage visibility. Read More →
Workbooks
Gigamon AMX Connector: Migration to CCF Push Restores Network Visibility After Deprecation
Gigamon connector migrated from deprecated Log Analytics method to CCF push architecture, preventing complete loss of network traffic and threat visibility. Read More →
IONIX: Migration to CCF RestApiPoller with Enhanced Data Deduplication
Major migration from HTTP Data Collector API to CCF RestApiPoller enabling automatic polling with query-time deduplication for IONIX attack surface management data. Read More →
Zscaler Internet Access: Major Platform Modernization with CloudNSS CCP Connectors
Complete solution overhaul replaces legacy connectors with 15 CloudNSS CCP connectors and 12 OAuth2 playbooks for enhanced Zscaler integration. Read More →
Visa Threat Intelligence Solution: Initial Package Release with IOC Detection Rules
New Visa Threat Intelligence (VTI) solution providing IOC feeds via DCR connector with high-severity detection rules for domains and file hashes. Read More →
Global Secure Access: Enhanced Threat Intelligence Correlation and MCP Monitoring
New analytic rules correlate threat intelligence indicators with GSA traffic while MCP Servers Dashboard provides Model Context Protocol server monitoring. Read More →
BeyondTrust PM Cloud: Workbook Preview Image Standardization
Renamed BeyondTrust PM Cloud workbook preview images from Dark/Light to Black/White convention and added BeyondTrust logo asset for UI consistency. Read More →
Compliance Solutions: Microsoft Exchange Product Link Rebrand Update
NIST SP 800-53 and Zero Trust compliance workbooks updated with current Microsoft Defender for Office 365 documentation links following EOP rebrand. Read More →
Major Solution Release: Cyble Vision and Tropico Solutions Added Plus Multi-Solution Updates
Large release adds two new threat intelligence solutions (Cyble Vision, Tropico) and updates to 15+ existing solutions across the repository. Read More →
Microsoft Entra ID: New Conditional Access Security Insights and Monitoring Workbook
New Conditional Access SISM workbook added to provide comprehensive CA policy monitoring and Zero Trust analytics. Read More →
New Cyble Vision Threat Intelligence Solution: Comprehensive CCF-Based Alert Platform
Massive new Cyble Vision solution providing 40+ specialized detection rules and parsers for diverse threat intelligence feeds from dark web to cloud security. Read More →
SOX IT Compliance Solution Released: IT Change Monitoring for Financial Controls
New compliance monitoring solution provides IT systems change tracking and segregation of duties controls for Sarbanes-Oxley compliance programs. Read More →
Lookout Mobile Security: Parser Fixes and Executive Dashboard Enhancement
Lookout solution updated to v3.0.1 with parser fixes, comprehensive security dashboards, and enhanced analytic rules. Read More →
ProofPoint TAP Detection Rules Updated for v2 Connector Migration
Two ProofPoint TAP Analytic Rules updated to reference ProofpointTAPv2 connector ID, ensuring compatibility with the newer connector version. Read More →
Fortigate ASIM Parser: Field Name Consistency Fix for Network Session Schema
Field name inconsistencies in Fortigate ASIM parsers corrected to ensure proper schema compliance and data normalization. Read More →
GDPR Workbook: Expanded Asset Coverage Beyond On-Prem Hosts
GDPR compliance workbook now monitors security alerts across Azure, AWS, GCP, and blob storage assets, not just traditional servers. Read More →
Critical Cloudflare Analytics Rules: Enhanced URL Entity Mapping and Repository Maintenance
P0-labeled update improves URL entity mapping in Cloudflare detection rules alongside extensive repository maintenance and validation improvements. Read More →
Microsoft Defender XDR Workbook Version 3: Enhanced Visualizations and Insights
Updated Microsoft Defender for Office 365 workbook to version 3 with new visuals and improved insights based on user feedback. Read More →
ContrastADR Solution: Parser Logic Enhancement and Workbook Fixes
ContrastADR parsers updated with column_ifexists logic for improved error handling and workbook template fixes. Read More →
New Quokka Qscout Mobile App Security Solution: Mobile Threat Detection Visibility
CCF connector and detection rule for Quokka Qscout mobile app security analysis platform provides visibility into malicious mobile application findings. Read More →