All pull requests

Pull requests

• [Packaging/Validation] Fix Windows V3 CCF connector path resolution, silent error swallowing, and template URL validation

  Tools
  #15393·Alon Karmona (alon-karmona1) opened Oct 22, 2026·

  ·
  

• [ASIM] Fix ingestion-time parser validation reliability

  ASIM
  #15392·Chencheng Xie (Microsoft) (melmarsezio) opened Oct 22, 2026Contributor·

  ·
  

• [ASIM] Create CrowdStrike Falcon Endpoint Protection - ProcessEvent parser

  ASIM
  #15391·Derrick Lee (yummyblabla) opened Oct 21, 2026Collaborator·

  ·
  1

  

• [ASIM] Add Salesforce Audit Trail and Login History ingestion-time parsers

  ASIM
  #15390·Chencheng Xie (Microsoft) (melmarsezio) opened Oct 21, 2026Contributor·

  ·
  

• Bump the pip group across 11 directories with 6 updates

  dependenciespython
  #15389·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  

• New solution: PolySwarm for Microsoft Sentinel (3.0.0)

  Codeless Connector Framework (CCF) ConnectorNew Solution
  #15388·Erick Ingleby (erickingleby-polyswarm) opened Oct 21, 2026·

  ·
  9

  

• SentinelToXDRMigration: Windows and live-lab fixes (LF artifacts, package-selection exchange, DeployParser parsers, CD readback, ASIM built-ins, run-id, KQL strings, sub-techniques, AH annotations)

  Tools
  #15387·Alon Karmona (alon-karmona1) opened Oct 21, 2026·

  ·
  5

  

• Migrate Batch 2 Sentinel solutions to Defender XDR (v3.2.2)

  SolutionXDR
  #15386·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  

• Verify SHA-256 digest of OMS onboarding script in CEF installer

  Connector
  #15385·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  

• Enforce MAX_SIZE_BYTES batch splitting in Logstash output buffer

  Connector
  #15384·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  

• Escape CEF delimiters and newlines in Fluentd-VMSS plugin

  Connector
  #15383·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  2

  

• Stop logging credentials in AzureStorage data connector

  Connector
  #15382·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  

• Harden MDTI Actor Lookup host validation and TLS verification

  Playbook
  #15381·idoshabi07 opened Oct 21, 2026Contributor·

  ·
  

• Upwind: release solution 3.0.4 with instructions for updating an existing deployment

  Solution
  #15378·keren-israeli opened Oct 21, 2026Contributor·

  ·
  

• Add detection rule for PHP worker shell-spawn (post-exploitation, generic)

  Detection
  #15377·rjmendez opened Oct 21, 2026·

  ·
  30

  

• WhoisFreaks 3.0.2: fix confidence threshold and NRD burst baseline

  Solution
  #15376·qayyum-jfreaks opened Oct 21, 2026Contributor·

  ·
  

• Add DecTrax Active Deception Sentinel Solution

  Codeless Connector Framework (CCF) ConnectorSolution
  #15374·MD Sadman Shovik (Sadman-TheDentian) opened Oct 20, 2026·

  ·
  1

  

• [ASIM] Add Microsoft Defender for Office 365 EmailEvent normalization parser

  ASIM
  #15373·JamesAde11 opened Oct 20, 2026Collaborator·

  ·
  1

  

• Migrate 10 solutions to Defender XDR Custom Detections and Workbooks (V3.1)

  1P SolutionMigrationQualificationSolutionValidationXDR
  #15372·Alon Karmona (alon-karmona1) opened Oct 20, 2026·

  ·
  

• [ASIM] Add Proofpoint POD EmailEvent normalization parser

  ASIMSafeToRun
  #15371·JamesAde11 opened Oct 20, 2026Collaborator·

  ·
  

• added step_invocation_id to the table schema

  Codeless Connector Framework (CCF) ConnectorSolution
  #15370·LidarTransmit (LidarAbu) opened Oct 20, 2026Contributor·

  ·
  1

  

• Migrate 10 Sentinel solutions to Defender XDR (v3.2.2)

  1P SolutionMigrationSolutionXDR
  #15368·idoshabi07 opened Oct 20, 2026Contributor·

  ·
  2

  

• Miro: add AI Interaction Logs connector (Beta) and throttle paged polling (3.1.0)

  Codeless Connector Framework (CCF) ConnectorSolution
  #15357·Ilia Sretenskii (ilia-sretenskii) opened Oct 20, 2026Contributor·

  ·
  1

  

• Add Sentinel-to-XDR authoring drafts and two offline-validated packages

  1P SolutionMigrationSolutionValidationXDR
  #15351·idoshabi07 opened Oct 19, 2026Contributor·4 of 7 tasks·

  ·
  

• Azure DDoS Protection: add Defender XDR detections, workbook, and qualification evidence (3.2.2)

  1P SolutionMigrationQualificationSolutionValidationXDR
  #15349·Ofer Inbar (oferInbar) opened Oct 19, 2026Collaborator·

  ·