All pull requests

Pull requests

• [ASIM] Add Microsoft Defender for Office 365 EmailEvent parser

  ASIMSafeToRun
  #15354·JamesAde11 opened Oct 19, 2026Collaborator·

  ·
  6

• feat(toolkit): add PR Qualification framework, SecurityAlert/NRT conversion, and security/privacy hardening

  #15353·Ofer Inbar (oferInbar) opened Oct 19, 2026Collaborator·

  ·
  1

• [ASIM] Add Proofpoint POD EmailEvent parser

  ASIMSafeToRun
  #15352·JamesAde11 opened Oct 19, 2026Collaborator·

  ·
  1

• Add Sentinel-to-XDR authoring drafts and two offline-validated packages

  #15351·idoshabi07 opened Oct 19, 2026Contributor·4 of 7 tasks·

  ·

• Syslog: add DeployParser parameter and Continuous PT0S XDR detection schedule (3.2.2)

  #15350·Ofer Inbar (oferInbar) opened Oct 19, 2026Collaborator·

  ·

• Azure DDoS Protection: add Defender XDR detections, workbook, and qualification evidence (3.2.2)

  #15349·Ofer Inbar (oferInbar) opened Oct 19, 2026Collaborator·

  ·

• Upwind: fill the empty vulnerability finding columns and fetch larger pages

  Solution
  #15348·keren-israeli opened Oct 19, 2026Contributor·1 task done·

  ·
  

• Bump the pip group across 7 directories with 5 updates

  dependenciespython
  #15347·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  

• Bump the npm_and_yarn group across 1 directory with 2 updates

  dependenciesjavascript
  #15346·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  

• Fix Box external user domain detection

  Content-PackageSolution
  #15345·v-sabiraj opened Oct 19, 2026Contributor·

  ·
  1

  

• Samsung Knox Asset Intelligence Release 3.0.4: add New Potential Multistage Attack rule, update DCR

  Codeless Connector Framework (CCF) ConnectorSolution
  #15342·Jaspreet Saini (jaspreet-saini) opened Oct 17, 2026Contributor·

  ·
  3

  

• OneLoginIAM: Add missing event fields and update package to 3.0.4

  Codeless Connector Framework (CCF) ConnectorSolution
  #15341·v-krishnachi (v-krishnachi) opened Oct 16, 2026Contributor·

  ·
  

• Add KELA BrandControl, IdentityGuard and Monitor solutions

  Codeless Connector Framework (CCF) ConnectorNew Solution
  #15340·miguelr-dotcom opened Oct 16, 2026·

  ·
  14

  

• Update SalesforceRealTimeEventMonitoring_PollingConfig.json

  Codeless Connector Framework (CCF) ConnectorSolution
  #15327·Badoodish opened Oct 15, 2026·

  ·
  4

  

• Solution for PIM without MFA from Unusual location

  Analytic RulesSolution
  #15322·Abhishek Raj (AbhiRaj-hub) opened Oct 14, 2026Contributor·

  ·
  5

  

• Add hunting queries: Entra ID tenant policy changes hunting pack (3 queries)

  Hunting
  #15321·Descambiado (descambiado) opened Oct 14, 2026Contributor·

  ·
  5

  

• Rehoming Sentinel data lake sample queries

  Hunting
  #15317·Zeinab Mokhtarian (zeinab-mk) opened Oct 13, 2026·

  ·
  53

  

• Add Netcraft Integration Gateway solution

  Codeless Connector Framework (CCF) ConnectorSolution
  #15315·kazik-netcraft opened Oct 13, 2026·

  ·
  30

  

• Cisco Meraki parser update: add ip_flow support and improve field extraction

  Solution
  #15309·PCNZ opened Oct 13, 2026Contributor·

  ·
  10

  

• Updated Events data table schema for CCF Data Connector in Rubrik

  Codeless Connector Framework (CCF) ConnectorSolution
  #15307·Nirali Shah (niralishah-crest) opened Oct 12, 2026Contributor·

  ·
  5

  

• TrendAI Vision One (CCF): Add multi-tenant support, fix pagination, dedupe OAT records

  Codeless Connector Framework (CCF) ConnectorSolution
  #15300·V1ManagedServices opened Oct 12, 2026Contributor·5 tasks done·

  ·
  6

  

• data ingestion

  Solution
  #15299·Bhagya Lakshmi Kukula (Bhagya767) opened Oct 10, 2026Contributor·

  ·
  1

  

• [Perimeter 81] Conversion of Azure function Connector into CCF Connector

  Codeless Connector Framework (CCF) ConnectorSolution
  #15297·dhanunjayab1054 (dhanunjaya1054) opened Oct 9, 2026Contributor·

  ·
  3

  

• Fix riskysignins delta

  Hunting
  #15290·Vladan Sekulic (vl43den) opened Oct 8, 2026Contributor·

  ·
  11

  

• WAF hunting query added

  HuntingSolution
  #15285·Ravi Nandan Ray (Rajaravi99) opened Oct 8, 2026Contributor·

  ·
  4