All pull requests

Pull requests

• Restore missing Microsoft Business Applications audit connector sources

  1P SolutionSolution
  #15587·aketht-msft opened Nov 6, 2026Contributor·

  ·

• [ASIM] Create AWSCloudTrail AuditEvent ITP regarding Account and Infra

  #15586·Derrick Lee (yummyblabla) opened Nov 6, 2026Collaborator·

  ·

• Fix workbook metadata version validation using exact PR snapshots

  #15582·Dr Bill Mcilhargey (billmcilhargey) opened Nov 6, 2026·

  ·
  1

  6

• Add Bindplane solution - Version 3.0.1

  ISV SolutionSolution
  #15568·Ekansh Gupta (eKuG) opened Nov 6, 2026·

  ·
  1

• New CCF Connector Cyble IOC CCF

  Codeless Connector Framework (CCF) ConnectorISV SolutionSolution
  #15567·PrasadCyble (prasad-cyble) opened Nov 6, 2026Contributor·

  ·
  

• Mimecast Events CCF Workbook

  ISV SolutionSolution
  #15566·Samik Roy (samikroy) opened Nov 6, 2026Contributor·

  ·
  

• Windows Security Events: Add dMSA creation and BadSuccessor (CVE-2025-53779) analytic rules

  1P SolutionSolution
  #15563·Diablo-research opened Nov 5, 2026·

  ·
  1

  

• feat(xbow): Bump XBOW API to 2026-11-01

  ISV SolutionSolution
  #15562·Mathew Payne (GeekMasher) opened Nov 5, 2026Contributor·

  ·
  1

  

• Corelight Support : Parsers update, DCE/DCR schemas updates

  ISV SolutionSolution
  #15561·devendra-chavda opened Nov 5, 2026Contributor·

  ·
  

• SentinelToXDRMigration: table-catalog follow-ups, preserve TimeGenerated, and locale URL validation

  Tools
  #15559·idoshabi07 opened Nov 5, 2026Contributor·

  ·
  5

  

• Add remote code execution community hunting query

  1P SolutionSolution
  #15558·Almog Omrad (t-almogomrad) opened Nov 5, 2026·

  ·
  5

  

• Correlate WAF detections with anomaly-score blocks

  1P SolutionSolution
  #15557·v-sabiraj opened Nov 5, 2026Contributor·

  ·
  3

  

• Add hunting query: Entra ID successful sign-in after account disabled

  Hunting
  #15555·Mike Sosa (mikedsosa) opened Nov 4, 2026·

  ·
  4

  

• CVE-2026-111497: Upgrade Playbook Function App to Node.js 22 (v3.4.3)

  ISV SolutionSolution
  #15554·neerajbalodiillumio opened Nov 4, 2026Contributor·

  ·
  3

  

• Migrate Batch 8 Sentinel solutions to Defender XDR (v3.2.2)

  1P SolutionMigrationQualificationSolutionValidationXDR
  #15551·idoshabi07 opened Nov 4, 2026Contributor·

  ·
  

• Fix Zscaler publisher ID and clean up legacy solution packages

  Content-PackageISV SolutionP0Solution
  #15550·v-skharode opened Nov 4, 2026Contributor·

  ·
  2

  

• HoneyLabs: publish as partner-supported solution (publisherId honeylabsnet, 3.0.1)

  ISV SolutionSolution
  #15549·HoneyLabs (honeylabshq) opened Nov 4, 2026Contributor·

  ·
  3

  

• feat(vti-connector): migrate VTI connector from api.visa.com to vtip.…

  ISV SolutionSolution
  #15548·Shams-Z opened Nov 3, 2026Contributor·

  ·
  3

  

• Migrate Cloudflare and Netskope storage connectors to FPA

  Codeless Connector Framework (CCF) ConnectorISV SolutionSolution
  #15544·TwistedAlex opened Nov 3, 2026Contributor·

  ·
  

• Migrate Microsoft Copilot solution to Defender XDR in Qualification Mode (v3.2.2)

  1P SolutionMigrationQualificationSolutionValidationXDR
  #15543·Ofer Inbar (oferInbar) opened Nov 3, 2026Collaborator·

  ·
  

• Document workbook metadata parser fix proposal

  documentation
  #15542·Dr Bill Mcilhargey (billmcilhargey) opened Nov 3, 2026·8 tasks·

  ·
  2

  

• Update location output in createUiDefinition.json

  ISV SolutionSolution
  #15539·edmond-nader opened Nov 3, 2026Contributor·

  ·
  1

  

• LicensingGovernance Workbook

  Solution
  #15538·Clive Watson QC (CliveWatsonQC) opened Nov 3, 2026Contributor·

  ·
  3

  

• Update Playbook - GTI Threat List - T-2h threat list request and workspace parameter

  ISV SolutionSolution
  #15537·devendra-chavda opened Nov 3, 2026Contributor·

  ·
  7

  

• SAP server time zone fix for ChangeDocsLogs

  Solution
  #15536·v-krishnachi (v-krishnachi) opened Nov 3, 2026Contributor·

  ·