All pull requests

Pull requests

• Dragos Notifications Workbook

  SolutionWorkbook
  #15336·Samik Roy (samikroy) opened Oct 16, 2026Contributor·

  ·
  4

  

• [ASIM] Validate ASIM parser name characters

  ASIM
  #15334·Brandon Qiao (Microsoft) (bqiao-microsoft) opened Oct 15, 2026Member·

  ·
  

• Update SalesforceRealTimeEventMonitoring_PollingConfig.json

  Codeless Connector Framework (CCF) ConnectorSolution
  #15327·Badoodish opened Oct 15, 2026·

  ·
  3

  

• Solution for PIM without MFA from Unusual location

  Analytic RulesSolution
  #15322·Abhishek Raj (AbhiRaj-hub) opened Oct 14, 2026Contributor·

  ·
  5

  

• Add hunting queries: Entra ID tenant policy changes hunting pack (3 queries)

  Hunting
  #15321·Descambiado (descambiado) opened Oct 14, 2026Contributor·

  ·
  

• Rehoming Sentinel data lake sample queries

  Hunting
  #15317·Zeinab Mokhtarian (zeinab-mk) opened Oct 13, 2026·

  ·
  51

  

• Add Netcraft Integration Gateway solution

  Codeless Connector Framework (CCF) ConnectorSolution
  #15315·kazik-netcraft opened Oct 13, 2026·

  ·
  29

  

• fix(Upwind): restore the Logs Loader deploy template used by older installs

  Solution
  #15312·keren-israeli opened Oct 13, 2026·1 task done·

  ·
  5

  

• Cisco Meraki parser update: add ip_flow support and improve field extraction

  Solution
  #15309·PCNZ opened Oct 13, 2026Contributor·

  ·
  10

  

• Updated Events data table schema for CCF Data Connector in Rubrik

  Codeless Connector Framework (CCF) ConnectorSolution
  #15307·Nirali Shah (niralishah-crest) opened Oct 12, 2026Contributor·

  ·
  4

  

• fix(Upwind): sync large orgs within the rate limit and function timeout

  ConnectorSolution
  #15305·keren-israeli opened Oct 12, 2026·1 task done·

  ·
  11

  

• RFPD-128206: Document Recorded Future Threat Map V1→V2 schema change

  readme
  #15304·Niklas Logren (aommm) opened Oct 12, 2026Contributor·

  ·
  1

  

• TrendAI Vision One (CCF): Add multi-tenant support, fix pagination, dedupe OAT records

  Codeless Connector Framework (CCF) ConnectorSolution
  #15300·V1ManagedServices opened Oct 12, 2026Contributor·5 tasks done·

  ·
  6

  

• data ingestion

  Solution
  #15299·Bhagya Lakshmi Kukula (Bhagya767) opened Oct 10, 2026Contributor·

  ·
  1

  

• [Perimeter 81] Conversion of Azure function Connector into CCF Connector

  Codeless Connector Framework (CCF) ConnectorSolution
  #15297·dhanunjayab1054 (dhanunjaya1054) opened Oct 9, 2026Contributor·

  ·
  3

  

• Fix riskysignins delta

  Hunting
  #15290·Vladan Sekulic (vl43den) opened Oct 8, 2026Contributor·

  ·
  11

  

• WAF hunting query added

  HuntingSolution
  #15285·Ravi Nandan Ray (Rajaravi99) opened Oct 8, 2026Contributor·

  ·
  4

  

• New solution: Databricks (audit logs via Amazon S3, CCF)

  New Solution
  #15284·broglock opened Oct 8, 2026·

  ·
  14

  

• Update to multiconnection the AzureDevops connector!

  Codeless Connector Framework (CCF) ConnectorSolution
  #15280·Konstantinos Lianos (KanenasCS) opened Oct 7, 2026Contributor·

  ·
  6

  

• Add RedRays SAP Security Findings Content Hub solution

  New Solution
  #15269·vah_13 (vah13) opened Oct 6, 2026·

  ·
  27

  

• Recorded Future Identity - make boolean playbook parameters strings

  Solution
  #15268·Niklas Logren (aommm) opened Oct 6, 2026Contributor·

  ·
  6

  

• Update PowerShell-Abuse.yaml

  Solution
  #15267·Stephan (stephanwaelde) opened Oct 6, 2026Contributor·

  ·
  4

  

• Added Host Enrichment Feature for Censys

  Solution
  #15258·harsh-maradia opened Oct 5, 2026·

  ·
  18

  

• Add FullHunt solution with CCF data connectors

  Codeless Connector Framework (CCF) ConnectorPlaybook
  #15252·Mazin Ahmed (mazen160) opened Oct 4, 2026·

  ·
  12

  

• Add IsMalicious incident IP enrichment playbook

  Playbook
  #15251·JVQ (hexablob) opened Oct 3, 2026·

  ·
  19