Repository navigation

Merge master to darktrace fork - #63

Closed

dylan-o-sullivan wants to merge 2665 commits into

darktrace:masterfrom

Closed

Merge master to darktrace fork#63
dylan-o-sullivan wants to merge 2665 commits into
darktrace:masterfrom
Azure:master

This pull request is big! We're only showing the most recent 250 commits

Commits on Jan 14, 2026
Commits on Jan 15, 2026
- [ASIM] Authentication AADSigninLogs parser rewrite (#13409)
  
  yummyblabla
  and
  Derrick Lee
  authored
  3903a64
- Update WorkbooksMetadata.json
  v-shukore
  committed
  0c25fe6
- Merge pull request #13397 from secpfe/master
  v-atulyadav
  authored
  6470305
- Revert "fix: Add missing logoFileName to CloudflareCCFWorkbook (upstream bug fix)"
  v-maheshbh
  committed
  4ef53a3
- Merge branch 'master' into pr/13278
  v-maheshbh
  committed
  f874d56
- Add GCP security analytic rules and hunting queries
  rahul0216
  committed
  bca10bc
- Update GCPDNSSECDisabled.yaml
  rahul0216
  committed
  37073dd
- Merge pull request #13427 from leeninc/master
  v-atulyadav
  authored
  6057df6
- Merge pull request #13437 from Azure/dependabot/pip/Solutions/ESET-Protect-Platform/Data-Connectors/azure-core-1.38.0
  v-atulyadav
  authored
  51beac3
- Update ValidConnectorIds.json
  rahul0216
  committed
  14cf7ff
- Bump azure-core in /Solutions/IllumioSaaS/Data Connectors
  dependabot[bot]
  authored
  23a39d7
- Remove DNSSEC Disabled analytic rule
  rahul0216
  committed
  3746977
- Delete GCPDNSSECDisabled.yaml
  rahul0216
  committed
  f73c95a
- Merge pull request #13244 from ryantully-archtis/archtis-ncprotect-3-0-1-fix
  v-dvedak
  authored
  383b132
- docs: Add workbook testing document for Cyren Threat Intelligence
  mazamizo21
  committed
  4548d2e
- Merge branch 'master' into pr/13278
  v-maheshbh
  committed
  b6adca8
- Added GCPDNSSECDisabled.yaml again
  rahul0216
  committed
  fce9085
- fix(TacitRed-IOC-CrowdStrike): resolve ARM-TTK failures
  mazamizo21
  committed
  2364e81
- Remove unused ResourceName mapping in GCP VM snapshot rule
  rahul0216
  committed
  c56e7dc
- update halcyon solution's publisherId
  Kyle West
  committed
  7df146d
- Merge pull request #13394 from Azure/tools/map-connectors-to-tables
  oshezaf
  authored
  444d9eb
- Renamed analytic rule GCPDNSSECDisabledForDNSZone
  rahul0216
  committed
  09389bc
- updated CSV field limit
  v-dhbedu
  committed
  b9a53dd
Commits on Jan 16, 2026
- Updated to 7.2
  oshezaf
  committed
  dd12798
- Merge branch 'master' into tools/map-connectors-to-tables
  oshezaf
  committed
  62fb308
- Update Hunting queries'names
  rahul0216
  committed
  877138a
- Set fetch-depth to 2 in workflow checkouts (#13450)
  rahul0216
  authored
  5102166
- Merge pull request #13278 from Data443/feature/cyren-threat-intelligence
  v-dvedak
  authored
  2acdec5
- fixed is_deprecated
  oshezaf
  committed
  5436d12
- Merge branch 'master' into tools/map-connectors-to-tables
  oshezaf
  committed
  c901e63
- Merge pull request #13451 from Halcyon-Sentinel-Integration/master
  v-atulyadav
  authored
  8fbcbbd
- Merge branch 'master' into pr/13074
  v-maheshbh
  committed
  70f066f
- Merge pull request #13074 from jamos-bt/master
  v-dvedak
  authored
  cb7ff52
- Merge branch 'master' into pr/13359
  v-atulyadav
  committed
  4bb1616
- Merge branch 'master' into dependabot/pip/Solutions/IllumioSaaS/Data-Connectors/azure-core-1.38.0
  v-atulyadav
  committed
  dd70d91
- Merge pull request #13447 from Azure/dependabot/pip/Solutions/IllumioSaaS/Data-Connectors/azure-core-1.38.0
  v-atulyadav
  authored
  47c5405
- Merge pull request #13359 from anthonylamark/SquadraTechnologiesSecRmm_3.0.0_D12262025
  v-atulyadav
  authored
  262eed4
- Add files via upload
  RamboV
  authored
  fc5fe84
- update readme.md
  RamboV
  authored
  67469fa
- Add files via upload
  RamboV
  authored
  3afc14f
- Update readme
  RamboV
  authored
  80f9823
- Updated to use CF API
  kingwil
  committed
  507fd34
- move note to top of release note
  mvang-quokka
  committed
  89e5764
- Update ASimTester.csv (#13461)
  
  yummyblabla
  and
  Derrick Lee
  authored
  efad58c
Commits on Jan 17, 2026
- Add support for standalone content items
  oshezaf
  committed
  4f1b9c0
- Merge pull request #13463 from Azure/tools/map-connectors-to-tables
  oshezaf
  authored
  feb62fb
Commits on Jan 18, 2026
- updated url for ioc connector
  chkp-jkohn
  committed
  17ca902
- removed duplicate 'schema' nesting, connector working
  chkp-jkohn
  committed
  52b29f4
Commits on Jan 19, 2026
- chore: Update Solutions Analyzer CSV files and documentation (#7)
  
  github-actions[bot]
  and
  RamboV
  authored
  892c9de
- Merge branch 'master' into users/rahul/gcpauditlogs-content
  rahul0216
  authored
  e5fa61d
- Update ZeroTrust(TIC3.0) to version 3.0.3
  v-shukore
  committed
  175347e
- Bump ZeroTrust solution to version 3.0.3
  v-shukore
  committed
  0a3b921
- Release NISTSP80053 solution version 3.0.3
  v-shukore
  committed
  816d29c
- Update ReleaseNotes.md
  v-shukore
  committed
  1a925fd
- Update Solution_GCPAuditLogs.json
  v-shukore
  committed
  b2f2883
- Add missing periods to release notes entries
  v-maheshbh
  committed
  4109acb
- Revert "chore: Update Solutions Analyzer CSV files and documentation (#7)"
  v-maheshbh
  committed
  c03c46d
- Remove trailing blank line from mainTemplate.json
  v-maheshbh
  committed
  68e621b
- chore: Update Solutions Analyzer CSV files and documentation (#8)
  
  github-actions[bot]
  and
  v-maheshbh
  authored
  a696075
- Merge pull request #13446 from Azure/users/rahul/gcpauditlogs-content
  v-atulyadav
  authored
  91ad82e
- feat(TacitRedThreatIntelligence): TacitRed CCF solution (no workbook metadata)
  mazamizo21
  committed
  5128b78
- Solution: TacitRed SentinelOne IOC Automation (Official) - Clean branch
  mazamizo21
  committed
  9cd6f8b
- [ASIM] Authentication - Crowdstrike FalconHost Parser changes (#13462)
  
  yummyblabla
  and
  Derrick Lee
  authored
  f8d6bf7
Commits on Jan 20, 2026
- Filter on TimeGenerated (#13467)
  
  yummyblabla
  and
  Derrick Lee
  authored
  e0551de
- Revert "chore: Update Solutions Analyzer CSV files and documentation (#8)"
  v-maheshbh
  committed
  f14fcad
- Aligned Bigid publisher id with partnercentral value
  mhebrard-bigid
  committed
  547bfc3
- Merge pull request #12671 from Azure/AwsCloudTrailParser
  v-atulyadav
  authored
  0559389
- chore: Re-trigger CI (GitHub API rate limit timeout)
  mazamizo21
  committed
  e6b09ac
- Add Conditional Access SISM workbook to Entra ID solution
  v-maheshbh
  committed
  b4a8e7f
- Merge pull request #13468 from Azure/v-maheshbh/Microsoft-Entra-ID
  v-atulyadav
  authored
  ee79516
- Merge remote-tracking branch 'origin/master'
  nitsan-tzur
  committed
  a6f78ef
- chore: Update Solutions Analyzer CSV files (#5)
  
  github-actions[bot]
  and
  nitsan-tzur
  authored
  57fef10
- update connector title to suggested
  mvang-quokka
  committed
  e8fdabf
- fix packaging (#13476)
  AmirSasson
  authored
  39fa412
Commits on Jan 21, 2026
- fix fetching sets with no events to collect
  nitsan-tzur
  committed
  1cfb8e1
- chore: Update Solutions Analyzer CSV files (#4)
  
  github-actions[bot]
  and
  nitsan-tzur
  committed
  8e4800e
- fix fetching sets with no events to collect
  nitsan-tzur
  committed
  d032a5b
- Merge remote-tracking branch 'origin/cyberark_epm_patch' into cyberark_epm_patch
  nitsan-tzur
  committed
  9318700
- [ASIM] NetworkSession - NTANetAnalytics - SrcIpAddr can map to SrcIp or SrcPublicIps (#13472)
  
  yummyblabla
  and
  Derrick Lee
  authored
  56f1e12
- [ASIM] Authentication - Sshd Parser fixes (#13460)
  
  yummyblabla
  and
  Derrick Lee
  authored
  dc6bfac
- Merge pull request #13341 from chrisda/EOP-chrisda
  v-dvedak
  authored
  32c5154
- Filter out specific alert name from SecurityAlerts
  hitem
  authored
  1707e92
- Update JudgementPandaExfilActivity.yaml
  v-sabiraj
  committed
  20f94a3
- Update SUNSPOTHashes.yaml
  v-sabiraj
  committed
  27c71a9
- Update LocalDeviceJoinInfoAndTransportKeyRegKeysAccess.yaml
  v-sabiraj
  committed
  451587e
- Update MITRE technique and add reference link
  v-sabiraj
  committed
  1fd3bb3
- Adding logo inside Workbooks folder
  Fenil Savani
  committed
  26cd422
- fix(TacitRed-SentinelOne): Fix playbookContentId for Content Hub loading
  mazamizo21
  committed
  40ab9cd
- fix(TacitRed-SentinelOne): Remove orphaned Playbooks variable
  mazamizo21
  committed
  592d8f9
- feat(TacitRedThreatIntelligence): Add workbook metadata entry per reviewer request
  mazamizo21
  committed
  4b93f24
- Based on confirmation from Microsfot team, remove playbook GetProofpointTAPEvents for TAP connector, The playbook appears to be the initial implementation of getting data into Sentinel. Now CCF Pol…
  Shubhangi Pagar
  committed
  fde00ff
- Merge pull request #13480 from Azure/v-sabiraj-updatinglinksforrules
  v-sabiraj
  authored
  001f62b
- feat(TacitRedThreatIntelligence): Add preview images to workbook folder
  mazamizo21
  committed
  fbd8934
- Update Teams hunting queries to version 1.0.0
  v-sabiraj
  committed
  1a38f46
- repackage
  chkp-jkohn
  committed
  2f2dea3
- Update Salesforce data connector instructions to include Shield Event Monitoring license requirement
  destinywu
  committed
  df07610
- Add files via upload
  RamboV
  authored
  e7a0ed6
- update readme.md for JoeSandbox URL Analysis Playbook
  RamboV
  authored
  6b34330
- Add files via upload
  RamboV
  authored
  9c0913e
- Revise readme.md for JoeSandbox File Analysis Playbook
  RamboV
  authored
  8883b92
Commits on Jan 22, 2026
- Update mainTemplate.json and package for XDR solution
  v-shukore
  committed
  b790d3c
- Fix syntax in mainTemplate.json parameters
  v-shukore
  committed
  e538467
- Update ReleaseNotes.md
  v-shukore
  committed
  5a70666
- Merge branch 'master' into v-shukore/MS-Defender-XDR
  v-shukore
  committed
  73d79d1
- Update ReleaseNotes.md
  v-shukore
  committed
  a5622a2
- Merge pull request #13464 from chkp-jkohn/connector-fixes
  v-atulyadav
  authored
  6a7dbce
- Merge pull request #13205 from Azure/v-shukore/MS-Defender-XDR
  v-atulyadav
  authored
  2b573d2
- Update DomainEntity_SecurityAlert.yaml
  v-shukore
  committed
  ba96ec8
- Update Threat Intelligence solution templates
  v-shukore
  committed
  39d5665
- Update BasePath in Solution_JoeSandbox.json
  v-maheshbh
  committed
  8224700
- chore: Update Solutions Analyzer CSV files and documentation (#9)
  
  github-actions[bot]
  and
  v-maheshbh
  authored
  d04dc50
- Revert "chore: Update Solutions Analyzer CSV files and documentation (#9)"
  v-maheshbh
  committed
  7dcb5fd
- Update SUNSPOT and Sigma rule references in XDR package
  v-sabiraj
  committed
  24fc642
- Merge pull request #12801 from RamboV/master
  v-dvedak
  authored
  750e74c
- Update 3.0.13.zip
  v-sabiraj
  committed
  9be8a9a
- Bump azure-core
  dependabot[bot]
  authored
  0810ba4
- Merge branch 'master' into pr/13479
  v-shukore
  committed
  8daf5ce
- Update Cisco Meraki Custom connector deployment references and API endpoint in azuredeploy.json to the correct Meraki URL.
  v-kasghosh
  committed
  2eda7ac
- Move SecOps workbook images to Preview folder
  v-maheshbh
  committed
  a192a38
- Update release notes
  kingwil
  committed
  7cb12c3
- Update MITRE technique and fix SUNSPOT rule descriptions
  v-sabiraj
  committed
  157cb5f
- Merge branch 'master' into pr/13268
  v-maheshbh
  committed
  555793a
- Revert "Zip File"
  v-kasghosh
  committed
  5d00a21
- Update Meraki API endpoint in mainTemplate.json
  v-kasghosh
  committed
  16c4182
- Updated solution description by eliminating legacy streaming text
  v-rusraut
  committed
  a00dedb
- Update SUNSPOTHashes.yaml
  v-shukore
  committed
  248af01
- Revert "feat(TacitRedThreatIntelligence): Add workbook metadata entry per reviewer request"
  v-maheshbh
  committed
  995addc
- Add TacitRed SecOps Workbook metadata
  v-maheshbh
  committed
  9b84b57
- Merge pull request #13485 from Azure/v-sabiraj-updatingMicrosoftXDRules
  v-atulyadav
  authored
  0229a92
- Merge pull request #13488 from Azure/v-rusraut/AzureDevOps-Issue13179
  v-atulyadav
  authored
  ea02cfd
- Rename BeyondTrustPMCloud preview images
  v-maheshbh
  committed
  98d7653
- Add BeyondTrust logo SVG asset
  v-maheshbh
  committed
  74a3348
- fix(WorkbooksMetadata): Fix BeyondTrust preview image naming for CI validation
  mazamizo21
  committed
  24d6a7e
- fix(TacitRed-SentinelOne): Add playbook metadata for Content Hub
  mazamizo21
  committed
  c4e1baf
- fix(TacitRed-IOC-CrowdStrike): Add playbook metadata for Content Hub
  mazamizo21
  committed
  b64c1ae
- Revert BeyondTrust metadata fix per Microsoft request
  mazamizo21
  committed
  a5aff40
- Merge pull request #13489 from Azure/v-maheshbh/BeyondTrustPMCloud
  v-atulyadav
  authored
  ed5623e
- Merge branch 'master' into pr/13268
  v-maheshbh
  committed
  d40398c
- flare solution 3.0.0
  jean-charles.verdier
  committed
  1860b7f
- [ASIM] Authentication M365Defender - Parser Fixes (#13441)
  
  yummyblabla
  and
  Derrick Lee
  authored
  e920c5e
- [ASIM] Authentication - Palo Alto Cortex data lake parser edits (#13410)
  
  yummyblabla
  and
  Derrick Lee
  authored
  5729e5a
- Correct Tenable_IE_CL table references in data connector configuration
  v-dhbedu
  committed
  cad9219
- [ASIM] Authentication su parser fixes (#13453)
  
  yummyblabla
  and
  Derrick Lee
  authored
  f861496
- Update empty custom parsers (#13494)
  
  yummyblabla
  and
  Derrick Lee
  authored
  77673cf
Commits on Jan 23, 2026
Commits on Jan 26, 2026
- Improve Instructions part of the connector UI with more InfoMessage
  3pcl-account
  committed
  40ba25d
- update version in logs
  3pcl-account
  committed
  d1d6c4b
Commits on Jan 27, 2026
- [Crowdstrike solution] - refresh API Connector with Cases data type and multiple improvements
  
  Srikar Shastry
  authored and
  Srikar Shastry
  committed
  9f5ca68
- Merge pull request #13269 from Data443/feature/tacitred-crowdstrike-ioc
  v-atulyadav
  authored
  ba569a2
- Merge pull request #13267 from Data443/feature/tacitred-sentinelone-v1
  v-dvedak
  authored
  015e58d
- updating release notes
  Fenil Savani
  committed
  7623308
- feat(CyrenThreatIntelligence): Version 3.0.1 - Auto-connect and cost optimization
  mazamizo21
  committed
  51e9047
- Revert "chore: Update Solutions Analyzer CSV files (#4)"
  v-shukore
  committed
  771cd9f
- Revert "chore: Update Solutions Analyzer CSV files (#5)"
  v-shukore
  committed
  28a046e
- fix(CyrenThreatIntelligence): Reduce queryWindowInMin from 240 to 15 per MS reviewer
  mazamizo21
  committed
  b8d1afe
- Merge pull request #13504 from srikarshastry/feature/srsistla/crowdStrikeApi
  hassanchawiche
  authored
  4baada3
- fix: Restore 3.0.0.zip per MS reviewer request (keep both versions)
  mazamizo21
  committed
  66da3f4
- Merge pull request #13502 from TwistedAlex/OCIInfraConnectorInstructionImprovement
  hassanchawiche
  authored
  5e776b8
- Bump Threat Intelligence solution to version 3.0.13
  v-sabiraj
  committed
  6063c01
- fix(TacitRedThreatIntelligence): Add preview images to Workbooks/Images folder
  mazamizo21
  committed
  2e6f90e
- Remove unused management variable from mainTemplate.json
  v-sabiraj
  committed
  8ac6735
- Revert "fix(TacitRedThreatIntelligence): Add preview images to Workbooks/Images folder"
  mazamizo21
  committed
  bb0b45e
- fix(TacitRedThreatIntelligence): Revert preview images and reduce queryWindowInMin to 120 minutes
  mazamizo21
  committed
  104aaf2
- fix(TacitRedThreatIntelligence): Update Package with queryWindowInMin: 120
  mazamizo21
  committed
  141a490
- fix(CyrenThreatIntelligence): Add missing auto-connect resources to PR
  mazamizo21
  committed
  28a81b3
- fix(CyrenThreatIntelligence): Update queryWindowInMin to 120 per MS reviewer
  mazamizo21
  committed
  fd6ca07
- Update ReleaseNotes.md
  v-sabiraj
  committed
  524e7ec
- Merge pull request #13506 from Azure/v-sabiraj-TInewpackageupdate
  v-dvedak
  authored
  c006e7a
- fix(TacitRedThreatIntelligence): Remove top-level DCE/table/DCR resources
  mazamizo21
  committed
  1cd681d
- fix(TacitRedThreatIntelligence): Remove tacitRedApiKey from createUiDefinition
  mazamizo21
  committed
  0b3e674
- Merge pull request #13499 from MartinPankraz/pr-13367
  v-atulyadav
  authored
  b470f59
- Update ReleaseNotes.md
  v-shukore
  committed
  0c09525
- fix: Update DCR transform to properly parse TacitRed API response
  mazamizo21
  committed
  eafa31f
- fix: Update poller config to match working deployment
  mazamizo21
  committed
  cebdaff
- fix(CyrenThreatIntelligence): Remove top-level standalone resources per MS guidance
  mazamizo21
  committed
  d567079
- Merge pull request #13268 from Data443/feature/tacitred-ccf-hub-v2
  v-dvedak
  authored
  163b296
- fix(CyrenThreatIntelligence): Keep only 3.0.1.zip and add release notes
  mazamizo21
  committed
  4f2f2d5
- fix: Restore 3.0.0.zip from upstream (unchanged from master)
  mazamizo21
  committed
  d67a836
- fixes WindowsAuditChecker workbook intro
  Nikolay Salnikov
  committed
  93d9d28
- Update zip package
  nitsan-tzur
  committed
  639be0b
- [ASIM] AuditEvent - AzureAdminActivity Parser changes (#13419)
  
  yummyblabla
  and
  Derrick Lee
  authored
  4306c7a
Commits on Jan 28, 2026