Wiz: Version 14.0

• Added the following action:

  • Get Blue Agent Analysis

Change

Azure Monitor: Version 5.0

• Updated integration documentation links in the integration configuration.

Change

QRadar: Version 69.0

• Updated timestamp filtering to use last_persisted_time for tracking modifications in the following connector:

  • Qradar Offenses Connector

Change

Jira: Version 60.0

• Added support for the Created Before date filter and Custom JQL query parameter in the following action:

  • List Issues

Change

Google Chronicle: Version 90.0

• Updated handling of Wiz Defend detections and ontology mapping in the following connector:

  • Chronicle Alerts Connector

AWS GuardDuty: Version 14.0

• Added support for Google Cloud Web Identity (OIDC) Federation authentication.

Change

SCC Enterprise: Version 22.0

• Refactored integration code to optimize underlying execution performance.

Change

Google Threat Intelligence: Version 18.0

• Added an optional Active Group parameter to support multi-tenant organization context routing in the integration configuration and the following connector:

  • ASM Issues Connector

Change

Google Chronicle: Version 88.0

• Added api_root parameter to alert extensions to expand normalization metadata options in the following connector:

  • Chronicle Alerts Connector

Change

Microsoft Defender ATP: Version 33.0

• Updated execution processing logic to improve backend tracking stability in the following action:

  • Execute Live Response Command

Change

ServiceNow: Version 68.0

• Updated affected CIs processing logic to handle missing reference keys smoothly in the following job:

  • Sync Incidents Job

Change

CrowdStrike Falcon: Version 78.0

• Fixed pagination loop logic to prevent infinite timeouts during high-volume sweeps in the following action:

  • Get Host Information

FileUtilities: Version 27.0

• Added support for extracting files from .7z archives in the following action:

  • Extract Zip Files

Change

Google Threat Intelligence: Version 17.0

• Fixed widget rendering failures by escaping raw HTML script tags within extended_response_body in the following action:

  • Get ASM Entity Details

Change

Google Chronicle: Version 87.0

• Improved case and alert synchronization logic by fixing the verification handling of valid external ID values in the following job:

  • Google Chronicle Sync Job

Proofpoint Email Protection: Version 8.0

• The following new actions have been added to support searching and programmatically managing quarantined emails:

  • Search Quarantined Emails

  • Delete Quarantined Email

  • Resubmit Quarantined Email

  • Move Quarantined Email

Change

Proofpoint Email Protection: Version 8.0

• Updated backend script implementation to support the new framework for the following actions:

  • Enrich Entities

  • Ping

Palo Alto Cortex XDR: Version 30.0

• The following new action has been added:

  • Download File

Feature

CyberArk PAM: Version 11.0

• The following new action has been added:

  • Change Account Password

Change

Siemplify: Version 110.0

• Updated results processing logic to cleanly escape backslashes in the following action:

  • Create Gemini Case Summary

Change

Secret Manager: Version 2.0

• Updated action description in the following action:

  • Ping

Change

CrowdStrike Falcon: Version 77.0

• Updated syncing logic to support multiple CrowdStrike alert IDs mapped to a single SecOps alert and improved error handling for alert ID context values in the following connector:

  • Sync Alerts

Change

Azure Active Directory: Version 29.0

• Updated error handling for sign-in activity retrieval in the following action:

  • Enrich User

Change

Google Cloud Compute: Version 19.0

• Refactored action code in the following actions:

  • Add IP To Firewall Rule

  • Remove external IP addresses

  • Execute VM Patch Job

  • Update Firewall Rule

Change

VirusTotalV3: Version 41.0

• Updated Predefined Widgets to fix cached fallback rendering in the following actions:

  • Enrich Hash

  • Enrich IOC

  • Enrich IP

  • Enrich URL

  • Get Domain Details

Change

Google Threat Intelligence: Version 16.0

• Updated Predefined Widgets to optimize loading performance and aligned layouts to prevent visual shifts in the following actions:

  • Enrich Entities

  • Enrich IOCs

Change

EmailV2: Version 42.0

• Updated default values for IMAP server address, port, username, and password for the following connector:

  • Generic IMAP Email Connector

Change

FireEye Helix: Version 20.0

• Added Trellix IAM OAuth authentication support.

Change

FireEye ETP: Version 9.0

• Added Trellix OAuth support, updated public API endpoints to v2, and removed legacy V1 API support.

Secret Manager: Version 1.0

• New Secret Manager integration.

Change

Source code is now publicly available on GitHub for the following integrations:

• AlienVault USM Appliance: Version 29.0

• AlienVaultTI: Version 15.0

• Arcsight: Version 46.0

• Axonius: Version 8.0

• BMC Helix Remedyforce: Version 18.0

• Cisco AMP: Version 24.0

• EasyVista: Version 8.0

• Mandiant: Version 10.0

• Office 365 Management API: Version 11.0

• SCCM: Version 22.0

• SonicWall-Beta: Version 9.0

• Stellar Cyber Starlight: Version 19.0

• Symantec Email Security.Cloud: Version 6.0

• Twilio: Version 16.0

• XForce: Version 20.0

• Zabbix: Version 17.0

Change

Google Chronicle: Version 86.0

• Fixed an issue where the connector would idle or hang on heartbeats instead of breaking early when nextPageToken or nextPageStartTime is received, and updated ontology mapping in the following connector:

  • Chronicle Alerts Connector

Change

Palo Alto Cortex XDR: Version 29.0

• Updated host name extraction logic in the raw payload in the following connector:

  • Palo Alto Cortex XDR Connector

Siemplify: Version 109.0

• Refactored the code in the following action:

  • Attach Playbook to Alert

Azure Security Center: Version 17.0

• Announced deprecation notice. Connector will be deprecated on 30th March 2027. Only critical bug fixes will be considered. For more information refer to the documentation of individual connectors in the following connector:

  • Azure Security Center - Security Alerts Connector

Change

Google Chronicle: Version 85.0

• Updated partial batch handling and added dynamic batch sizing to prevent timeout loops, refactored logging and added monitoring signals for process health, and pipeline states, and improved detections batch parsing and processing efficiency in the following connector:

  • Chronicle Alerts Connector

• Integration: Updated authentication flow mechanism.

Change

Google Cloud IAM: Version 20.0

• Updated Predefined Widgets in the following widgets:

  • List Roles

  • List Service Accounts

Change

Microsoft Azure Sentinel: Version 64.0

• Announced deprecation notice. Connector will be deprecated on 30th March 2027. Only critical bug fixes will be considered. For more information refer to the documentation of individual connectors in the following connectors:

  • Microsoft Azure Sentinel Incident Connector v2

  • Microsoft Sentinel Incident Tracking Connector

Change

Microsoft Defender ATP: Version 32.0

• Announced deprecation notice. Connector will be deprecated on 30th March 2027. Only critical bug fixes will be considered. For more information refer to the documentation of individual connectors in the following connectors:

  • Microsoft Defender ATP Connector

  • Microsoft Defender ATP Connector V2

Change

Microsoft Graph Mail: Version 42.0

• Updated the logic for robust handling of transient upstream API errors and connection issues in the following connector:

  • Microsoft Graph Mail Connector

Change

Microsoft Graph Mail Delegated: Version 19.0

• Updated the logic for robust handling of transient upstream API errors and connection issues in the following connector:

  • Microsoft Graph Mail Delegated Connector

Change

Microsoft Graph Security: Version 27.0

• Announced deprecation notice. Connector will be deprecated on 30th March 2027. Only critical bug fixes will be considered. For more information refer to the documentation of individual connectors in the following connectors:

  • Microsoft Graph Office 365 Security and Compliance Connector

  • Microsoft Graph Security Connector

Change

Protectwise: Version 7.0

• Refactored the code in the following action:

  • Get Pcap

Change

Qualys VM: Version 28.0

• Fixed AttributeError during parsing of multiple host lists and added fallback hostname matching in the following actions:

  • List Endpoint Detections

  • Enrich Host

AlienVault USM Appliance: Version 28.0

• Refactored the code for the following action:
  • Get PCAP Files For Events

Change

ConnectWise: Version 23.0

• Refactored the code for the following action:
  • Create Alerts Ticket

Change

Google Chronicle: Version 84.0

• Refactored the code for the following action:
  • Get Detection Details

Change

Jira: Version 58.0

• Refactored the code for the following action:
  • Create Alert Issue

Change

ServiceDesk Plus: Version 10.0

• Refactored the code for the following action:
  • Create Alert Request

Change

ServiceDesk PlusV3: Version 10.0

• Refactored the code for the following action:
  • Create Alert Request

Change

ServiceNow: Version 67.0

• Refactored the code for the following action:
  • Create Alert Incident

Change

Siemplify: Version 245.0

• Refactored internal code execution logic for the platform integration.

Change

MISP: Version 275.6

• Refactored internal code execution logic and optimized core integration components.

Change

Microsoft Sentinel Incident Tracking Connector: Version 29.0

• Added the Incident Creation Time Filter (days) advanced parameter and optimized error handling logic.

New Cloud Identity integration

AlienVault USM Appliance: Version 27.0

• Refactored the code for the following action:
  • Get PCAP Files For Events

Change

Protectwise: Version 6.0

• Refactored the code for the following action:
  • Get Pcap

Change

Service Desk Plus: Version 9.0

• Refactored the code for the following action:
  • Create Alert Request

Change

Service Desk Plus V3: Version 9.0

• Refactored the code for the following action:
  • Create Alert Request

Change

ServiceNow: Version 66.0

• Updated the code for the following action:
  • Update Incident: Added support for updating reference fields.

Change

Google Chronicle: Version 83.0

• Added support for filtering alerts by rule type to the following connector:
  • Google Chronicle - Chronicle Alerts Connector

Change

Tanium: Version 20.0

• Integration: Added a partner header to all API requests.

Azure Active Directory: Version 28.0

• Integration: Updated TIPCommon to 2.3.8.

Change

ConnectWise: Version 22.0

• Refactored the code for the following action:
  • Create Alerts Ticket

Change

EmailV2: Version 41.0

• Integration: Updated TIPCommon to 2.3.8 and migrated EnvironmentCommon imports to TIPCommon.envcommon.

Change

Google Chronicle: Version 82.0

• Integration: Improved memory efficiency to prevent OOM crashes when querying large timeframes for Lookup Similar Alerts.
• Updated the code for the following action:
  • Get Detection Details
• Improved Dynamic List filter validation, logging, and added the Validate Dynamic List Entries parameter for the following connector:
  • Google Chronicle - Chronicle Alerts Connector

Change

Jira: Version 57.0

• Refactored the code for the following action:
  • Create Alert Issue

Change

MITRE ATT&CK: Version 19.0

• Integration: Updated TIPCommon to 2.3.8.

Change

ServiceNow: Version 65.0

• Refactored the code for the following action:
  • Create Alert Incident

Tenable.io: Version 18.0

• Improved the handling of concurrent requests and API rate limits in the following action:

  • Enrich Entities

Change

SiemplifyUtilities: Version 30.0

• Added support for backticks to the following action:

  • Query Joiner

Change

Azure Active Directory: Version 27.0

• Updated enrichment logic to ensure id is fetched when Include Last Sign In Details is enabled in the following action:

  • Enrich User

Change

Palo Alto Next Gen Firewall: Version 29.0

• Integration: Updated Manager to reuse the API token instead of generating a new one.

UrlScan.io: Version 30.0

• Added is_risky handling to the following action:

  • Url Check

Change

Siemplify: Version 107.0

• Integration: Updated TIPCommon dependency.

Change

Microsoft Graph Mail: Version 41.0

• Updated MSG attachments processing logic in the following connector:

  • Microsoft Graph Mail Connector

Change

Zerofox: Version 4.0

• Integration: Updated documentation link.

Change

MISP: Version 39.0

• Updated tag retrieval logic in the following actions:

  • Add Tag to an Attribute

  • Add Tag to an Event

  • Remove Tag from an Attribute

  • Remove Tag from an Event

Change

Anomali ThreatStream: Version 16.0

• Added is_risky handling to the following action:

  • Enrich Entities

Change

Microsoft Graph Mail Delegated: Version 18.0

• Updated MSG attachments processing logic in the following connector:

  • Microsoft Graph Mail Delegated Connector

Change

Palo Alto Cortex XDR: Version 28.0

• Added the ability to ignore specific artifact types to the following connector:

  • Palo Alto Cortex XDR Connector

Change

Source code is now publicly available on GitHub for the following integrations:

• Cisco Orbital: Version 9.0

• F5 Big IQ: Version 8.0

• FireEye EX: Version 14.0

• HCL BigFix Inventory: Version 6.0

• Illusive Networks: Version 8.0

• Lastline: Version 10.0

• McAfee ATD: Version 18.0

• McAfee Active Response: Version 10.0

• ObserveIT: Version 6.0

• Outpost24: Version 9.0

• Site24x7: Version 7.0

• Splash: Version 8.0

• Websense: Version 15.0

Netskope: Version 17.0

• The following new actions have been added:

  • Add Entities to URL List

  • Deploy URL List Changes

Change

Netskope: Version 17.0

• Added a new Use V2 API parameter to the following actions:

  • List Clients

  • List Quarantined Files

• Integration: Added support for V2 API endpoints and OAuth 2.0 authentication.

Change

Qualys VM: Version 26.0

• Integration: Migrated to the latest Qualys API endpoints.

Change

SCC Enterprise: Version 21.0

• Updated ticket synchronization logic in the following job:

  • Sync SCC Jira Tickets

Change

McAfee Mvision EDR: Version 12.0

• Integration: Added support for configuring the Login API Root as a customizable parameter.

SentinelOneV2: Version 50.0

• The following new job has been added:

  • Sync Threats

Feature

CrowdStrike Falcon: Version 76.0

• The following new job has been added:

  • Sync Alerts

Change

ServiceNow: Version 64.0

• Added support for disabling overflow settings and updated ticket processing and environment mapping logic in the following connector:

  • ServiceNow Connector

Change

Zscaler: Version 14.0

• Added the ability to provide IOCs using input parameters to the following actions:

  • Add To Blacklist

  • Add To Whitelist

  • Remove From Blacklist

  • Remove From Whitelist

• Integration: Added support for OAuth authentication.

Change

Mandiant Threat Intelligence: Version 17.0

• Optimized execution performance and entity processing logic in the following action:

  • Enrich Entities

Gmail: Version 9.0

• A new predefined widget has been added to the following action:

  • Delete Email

Feature

Tanium: Version 19.0

• A new predefined widget has been added to the following action:

  • Create Connection

Feature

Cynet: Version 13.0

• New predefined widgets have been added to the following actions:

  • Delete Hash In Hosts

  • Kill Hash In Hosts

  • Quarantine Hash In Hosts

Feature

Area1: Version 9.0

• A new predefined widget has been added to the following action:

  • Search Indicator

Feature

Azure Active Directory: Version 26.0

• A new predefined widget has been added to the following action:

  • Is User In a Group

Feature

MX ToolBox: Version 14.0

• A new predefined widget has been added to the following action:

  • SPF Lookup

Feature

Active Directory: Version 41.0

• New predefined widgets have been added to the following actions:

  • Is User In Group

  • List User Groups

Feature

Cisco Threat Grid: Version 18.0

• New predefined widgets have been added to the following actions:

  • Get Hash Associated Domains

  • Get Hash Associated IPs

Feature

Google Chronicle: Version 81.0

• The following new action has been added:

  • Is CIDR In Data Table

Feature

Endgame: Version 15.0

• New predefined widgets have been added to the following actions:

  • Collect Autoruns

  • Drivers Survey (Windows only)

  • Firewall Survey (Windows only)

  • Process Survey

  • Removable Media Survey (Windows only)

  • Software Survey (Windows only)

  • User Sessions Survey

Feature

AWS Identity and Access Management (IAM): Version 10.0

• A new predefined widget has been added to the following action:

  • Disable User Access

Feature

Carbon Black Response: Version 39.0

• A new predefined widget has been added to the following action:

  • Download Binary

Feature

Carbon Black Protection: Version 13.0

• A new predefined widget has been added to the following action:

  • Get Computers By File

Feature

McAfee ATD: Version 17.0

• A new predefined widget has been added to the following action:

  • Check Hash

Feature

UnshortenMe: Version 9.0

• A new predefined widget has been added to the following action:

  • Unshorten URL

Feature

CiscoUmbrella: Version 19.0

• A new predefined widget has been added to the following action:

  • Get Associated Domains

Feature

Microsoft Graph Mail: Version 40.0

• A new predefined widget has been added to the following action:

  • Get Mailbox Account Out Of Facility Settings

Change

Exabeam Advanced Analytics: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Check Point SandBlast: Version 8.0

• Introduced light theme support for predefined widgets of the following actions:

  • Query

  • Upload File

Change

Palo Alto AutoFocus: Version 12.0

• Introduced light theme support for predefined widgets of the following actions:

  • Hunt Domain

  • Hunt File

  • Hunt Ip

  • Hunt Url

Change

XForce: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Hash Info

  • Get IP Info

  • Get IP malware

  • Get Url Info

Change

Trend Micro Apex Central: Version 7.0

• Introduced light theme support for predefined widgets of the following actions:

  • Create Entity UDSO

  • Create File UDSO

  • Enrich Entities

Change

BulkWhoIs: Version 18.0

• Introduced light theme support for the predefined widget of the following action:

  • WhoIs Details

Change

Any.Run: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Report

Change

Siemplify ThreatFuse: Version 19.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Google Cloud Policy Intelligence: Version 7.0

• Introduced light theme support for the predefined widget of the following action:

  • Search Service Account Activity

Change

MISP: Version 38.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Event Details

  • Get Related Events

Change

ReversingLabs Titanium: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Malware Details

Change

MX ToolBox: Version 14.0

• Introduced light theme support for predefined widgets of the following actions:

  • A Record Lookup

  • Blacklist Check

  • MX Record Lookup

  • Reverse DNS Lookup

Change

Google Rapid Response (GRR): Version 11.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Client Details

  • List Clients

  • List Launched Flows

Change

Armis: Version 15.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Lastline: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Analysis Results

Change

McAfee Mvision EPO: Version 11.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Endpoint

Change

Office 365 Cloud App Security: Version 26.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get IP related activities

  • Get User related activities

Change

SSL Labs: Version 11.0

• Introduced light theme support for the predefined widget of the following action:

  • Analyse Entity

Change

Qualys VM: Version 25.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Host

  • List Endpoint Detections

Change

Exchange: Version 123.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Account Out Of Facility Settings

  • Send Email And Wait

Change

Microsoft Defender ATP: Version 31.0

• Added Graph API V2 version support to the following actions:

  • Get User Related Alerts

  • List Alerts

  • Ping

  • Update Alert

• Deprecated the following actions:

  • Get File Related Alerts

  • Get Machine Related Alerts

• Added Graph API V2 version support to the following connector:

  (REGRESSIVE) The connector must be updated by April 10, 2026.

  • Microsoft Defender ATP Connector V2

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Execute Live Response Command

  • Get File Related Alerts

  • Get File Related Machines

  • Get Machine Logon Users

  • Get Machine Recommendations

  • Get Machine Related Alerts

  • Get Machine Vulnerabilities

  • Get User Related Alerts

Change

Cisco AMP: Version 23.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Computer Info

  • Get Computers By File Hash

  • Get Computers By File Name

  • Get Computers By Network Activity (Ip)

  • Get Computers By Network Activity (URL)

  • Isolate Machine

  • Unisolate Machine

Change

HaveIBeenPwned: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Check Account

Change

Symantec Blue Coat ProxySG: Version 7.0

• Introduced light theme support for predefined widgets of the following actions:

  • Block Entities

  • Enrich Entities

Change

Cybereason: Version 25.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Sensor Details

  • Is Probe Connected

Change

Cofense Triage: Version 21.0

• Introduced light theme support for predefined widgets of the following actions:

  • EnrichURL

  • Get Domain Details

  • Get Threat Indicator Details

Change

Slack: Version 30.0

• Introduced light theme support for predefined widgets of the following actions:

  • Send Advanced Message

  • Send Message

Change

IPVoid: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Ip Reputation

Change

RSA NetWitness EDR: Version 9.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Endpoint

  • Get IOC Details

Change

Microsoft Intune: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Managed Device

Change

Trend Micro DDAN: Version 6.0

• Introduced light theme support for predefined widgets of the following actions:

  • Submit File

  • Submit File URL

Change

Tenable.io: Version 17.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • List Endpoint Vulnerabilities

Change

JoeSandbox: Version 11.0

• Introduced light theme support for predefined widgets of the following actions:

  • Search Hash

  • Search Url

Change

Endgame: Version 15.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Network Survey

  • System Survey

Change

ThreatQ: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich CVE

  • Enrich Email

  • Enrich Hash

  • Enrich IP

  • Enrich URL

  • Get Indicator Details

  • Get Malware Details

  • Link Entities

  • Link Entities To Object

  • List Entity Related Objects

  • Update Indicator Score

  • Update Indicator Status

Change

RSA NetWitness Platform: Version 17.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Endpoint

  • Enrich File

  • Query NetWitness For Events Around Host

  • Query NetWitness For Events Around IP

  • Query NetWitness For Events Around User

Change

McAfee TIEDXL: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Get File Reputation

Change

Symantec Endpoint Protection 14: Version 21.0

• Introduced light theme support for the predefined widget of the following action:

  • GetSystemInfo

Change

FireEye AX: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Submit URL

Change

Splash: Version 7.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

MalShare: Version 11.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Hash

Change

Elastica CloudSOC: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Get User Activities

Change

Amazon Macie: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Findings

Change

CiscoUmbrella: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Domain Security Info

  • Get Domain Status

  • Get Whois

  • Is Domain In Cisco Popularity List

Change

SCCM: Version 21.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Computer Properties

  • Get Login History

Change

Web Risk: Version 4.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Submit Entities

Change

DShield: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Ip Info

Change

Tenable Security Center: Version 22.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich IP

  • Get Related Assets

  • Get Vulnerabilities for IP

Change

ServiceNow: Version 63.0

• Introduced light theme support for the predefined widget of the following action:

  • List Records Related To User

Change

McAfee EPO: Version 37.0

• Introduced light theme support for predefined widgets of the following actions:

  • Compare Server and Agent DAT

  • Get Agent Information

  • Get Dat Version

  • Get Endpoint Events

  • Get Events For Hash

  • Get Host IPS Status

  • Get Host Network IPS Status

  • Get Last Communication Time

  • Get McAfee Epo Agent Version

  • Get System Information

  • Get Virus Engine Agent Version

  • Run Full Scan

  • Update Mcafee Agent

Change

RSA NetWitness: Version 20.0

• Introduced light theme support for predefined widgets of the following actions:

  • Query NetWitness For Events Around Host

  • Query NetWitness For Events Around IP

  • Query NetWitness For Events Around User

Change

Axonius: Version 7.0

• Introduced light theme support for predefined widgets of the following actions:

  • Add Note

  • Enrich Entities

Change

Automox: Version 8.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Execute Device Command

  • Execute Policy

Change

Cylance: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Threat

  • Get Threat Devices

  • Get Threat Download Link

Change

Anomali: Version 15.0

• Introduced light theme support for the predefined widget of the following action:

  • GetThreatInfo

Change

TruSTAR: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

PhishingInitiative: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Url Status

Change

Digital Shadows: Version 12.0

• Introduced light theme support for predefined widgets of the following actions:

  • EnrichCVE

  • EnrichHash

  • EnrichIP

  • EnrichURL

Change

iBoss: Version 14.0

• Introduced light theme support for the predefined widget of the following action:

  • URL Lookup

Change

Google Cloud IAM: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Service Account IAM Policy

  • Rotate Service Account Keys

  • Set Service Account IAM Policy

Change

Sumo Logic Cloud SIEM: Version 13.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Search Entity Signals

Change

Microsoft Teams: Version 37.0

• Introduced light theme support for predefined widgets of the following actions:

  • Create Chat

  • Send User Message

Change

FortiAnalyzer: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Sophos: Version 21.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Events Log

  • Get Services Status

Change

Palo Alto Cortex XDR: Version 27.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Scan Endpoint

Change

Cisco Threat Grid: Version 18.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Submissions

Change

Intezer: Version 14.0

• Introduced light theme support for the predefined widget of the following action:

  • Submit Hash

Change

Recorded Future: Version 22.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich CVE

  • Enrich Hash

  • Enrich Host

  • Enrich IP

  • Enrich IOC

  • Enrich URL

Change

Gmail: Version 9.0

• Introduced light theme support for predefined widgets of the following actions:

  • Search For Emails

  • Wait For Thread Reply

Change

Illusive Networks: Version 7.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Run Forensic Scan

Change

VirusTotal: Version 42.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Domain Report

  • Scan Hash

  • Scan IP

  • Scan URL

  • Upload And Scan Files

Change

Anomali ThreatStream: Version 15.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

ThreatConnect: Version 17.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Azure Active Directory: Version 26.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Host

  • Enrich User

  • Get Manager Contact Details

  • List Users

  • List User's Groups Membership

  • Revoke User Session

Change

Splunk: Version 65.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Host Events

Change

Attivo: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Cisco ISE: Version 16.0

• Introduced light theme support for the predefined widget of the following action:

  • Add Endpoint To Endpoint Identity Group

Change

DeepSight: Version 11.0

• Introduced light theme support for predefined widgets of the following actions:

  • Scan Domain

  • Scan Email

  • Scan File Name

  • Scan Hash

  • Scan IP

  • Scan URL

Change

Symantec Email Security Cloud: Version 5.0

• Introduced light theme support for the predefined widget of the following action:

  • Block Entities

Change

GSuite: Version 26.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Get Extension Details

  • Get Group Details

  • Get Host Browser Details

  • List Group Privileges

  • List User Privileges

  • Revoke User Session

  • Search User Activity Events

Change

SymantecESCC: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Google Cloud Compute: Version 17.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

FireEye HX: Version 23.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Host Alert Groups

  • Get Host Info

  • Get List of File Acquisitions For Host

  • Is Contain Malware Alerts

Change

Rapid7 InsightVm: Version 16.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Asset

Change

McAfee Mvision EDRV2: Version 5.0

• Introduced light theme support for the predefined widget of the following action:

  • Create Investigation

Change

HCL BigFix Inventory: Version 5.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

SiemplifyUtilities: Version 29.0

• Added support for a custom delimiter in the following action:

  • Query Joiner

Change

Nmap: Version 4.0

• Introduced light theme support for the predefined widget of the following action:

  • Scan Entities

Change

VMware Carbon Black Enterprise EDR: Version 10.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Hash

  • Get Events Associated With Process by Process Guide

  • Process Search

Change

Outpost24: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

PassiveTotal: Version 14.0

• Introduced light theme support for predefined widgets of the following actions:

  • WhoIs Address Reputation

  • Whois Host Reputation

  • WhoIs Scan Address

  • WhoIs Scan Domain

Change

Carbon Black Defense: Version 12.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Device Info

  • Get Events

  • Get Processes

Change

QRadar: Version 67.0

• Introduced light theme support for predefined widgets of the following actions:

  • Similar Events Query

  • Similar Flows Query

Change

SentinelOneV2: Version 49.0

• Introduced light theme support for predefined widgets of the following actions:

  • Create Hash Blacklist Record

  • Create Hash Exclusion Record

  • Get Agent Status

  • Get Application List For Endpoint

  • Get Events For Endpoint Hours Back

  • Get Group Details

  • Get Hash Reputation

Change

Zscaler: Version 13.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Sandbox Report

  • Lookup Entity

Change

McAfee Mvision EDR: Version 11.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Endpoint

Change

Tanium: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Delete File

  • Enrich Entities

  • List Endpoint Events

  • Quarantine Endpoint

Change

VMware Carbon Black Endpoint Standard Live Response: Version 10.0

• Introduced light theme support for predefined widgets of the following actions:

  • Create Memdump

  • Delete File

  • Delete File from Cloud Storage

  • Download File

  • Execute File

  • Kill Process

  • List Files

  • List Files in Cloud Storage

  • List Processes

  • Put File

Change

VSphere: Version 12.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Vm By Ip

Change

Nozomi Networks: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Active Directory: Version 41.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich entities

  • Get Manager Contact Details

Change

Talos: Version 20.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Reputation

  • WhoIs

Change

Check Point Threat Reputation: Version 8.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get File Hash Reputation

  • Get Host Reputation

  • Get IP Reputation

Change

Zabbix: Version 16.0

• Introduced light theme support for the predefined widget of the following action:

  • Execute Script

Change

FireEye Helix: Version 19.0

• Introduced light theme support for the predefined widget of the following action:

  • Add Entities To a List

Change

Malware Domain List: Version 11.0

• Introduced light theme support for the predefined widget of the following action:

  • Check URL

Change

AlienVault USM Appliance: Version 26.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Assets

  • Enrich Vulnerabilities

Change

Alexa: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Get URL Rank

Change

AWS GuardDuty: Version 12.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get a Trusted IP List

  • Get Detector Details

  • Get Threat Intelligence Set Details

Change

HTTP: Version 15.0

• Introduced light theme support for the predefined widget of the following action:

  • Get URL Data

Change

BlueLiv: Version 13.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • List Entity Threats

Change

Azure AD Identity Protection: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Carbon Black Response: Version 39.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Binary

  • Enrich Process

  • Get System Info

  • Hosts By Process

  • List Processes

Change

Falcon Sandbox: Version 21.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Hash Scan Report

  • Scan URL

  • Submit File

Change

CSV: Version 41.0

• Introduced light theme support for predefined widgets of the following actions:

  • CSV Search by Entity

  • CSV Search by String

Change

URLVoid: Version 14.0

• Introduced light theme support for the predefined widget of the following action:

  • Get domain reputation

Change

Harmony Mobile: Version 7.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

Cloudflare: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Add URL To Rule List

Change

Carbon Black Protection: Version 13.0

• Introduced light theme support for the predefined widget of the following action:

  • Analyze File

Change

Jira: Version 56.0

• Introduced light theme support for the predefined widget of the following action:

  • Search Users

Change

Microsoft Graph Mail Delegated: Version 17.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Mailbox Account Out Of Facility Settings

Change

Trend Vision One: Version 9.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • Execute Custom Script

  • Isolate Endpoint

  • Submit File

  • Submit URL

  • Unisolate Endpoint

Change

Internet Storm Center: Version 6.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

AlienVaultTI: Version 14.0

• Introduced light theme support for the predefined widget of the following action:

  • Enriches Entities

Change

Google Threat Intelligence: Version 14.0

• Migrated the following connector to new API endpoints:

  • Google Threat Intelligence - Livehunt Connector

Change

Shodan: Version 17.0

• Introduced light theme support for the predefined widget of the following action:

  • Get Ip Info

Change

Cisco Vulnerability Management: Version 3.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • List Asset Vulnerabilities

Change

ForeScout CounterACT: Version 6.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

McAfee ESM: Version 46.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get Similar Events

  • Send Entity Query To ESM

Change

LogRhythm: Version 23.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • List Entity Events

Change

Mandiant ASM: Version 13.0

• Introduced light theme support for the predefined widget of the following action:

  • Search ASM Entities

Change

Ivanti Endpoint Manager: Version 10.0

• Introduced light theme support for predefined widgets of the following actions:

  • Enrich Entities

  • List Endpoint Vulnerabilities

Change

Cuckoo: Version 14.0

• Introduced light theme support for the predefined widget of the following action:

  • Detonate Url

Change

IntSights: Version 27.0

• Introduced light theme support for the predefined widget of the following action:

  • Search IOCs

Change

Vectra: Version 13.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Endpoint

Change

McAfee ATD: Version 17.0

• Introduced light theme support for the predefined widget of the following action:

  • Submit URL

Change

FortinetFortiSIEM: Version 10.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Entities

Change

ThreatCrowd: Version 9.0

• Introduced light theme support for the predefined widget of the following action:

  • EnrichEntities

Change

APIVoid: Version 14.0

• Introduced light theme support for predefined widgets of the following actions:

  • Get domain reputation

  • Get Ip Reputation

  • Get Screenshot

  • Get URL Reputation

  • Verify Email

Change

McAfee Mvision EPOV2: Version 8.0

• Introduced light theme support for the predefined widget of the following action:

  • Enrich Endpoint

Change

VMRay: Version 19.0

• Introduced light theme support for predefined widgets of the following actions:

  • Scan Hash

  • Scan URL

Change

Google Chronicle: Version 81.0

• Added support for CIDR matching to the following action:

  • Is Value In Reference List

Microsoft 365 Defender: Version 26.0

• The following new job has been added:

  • Sync Alerts

Feature

SentinelOneV2: Version 48.0

• The following new job has been added:

  • Sync Alerts

Change

Microsoft Teams: Version 36.0

• Optimized user lookup logic for the following actions:

  • Add Users To Channel

  • Create Chat

Change

Akamai: Version 6.0

• Updated the JSON results of the following actions:

  • Add Items To Client List

  • Remove Items From Client List

Change

Source code is now publicly available on GitHub for the following integrations:

• CyberX: Version 6.0

• JuniperVSRX: Version 11.0

• McAfee NSM: Version 11.0

• Micro Focus ITSMA: Version 7.0

• Portnox: Version 9.0

• ReversingLabs A1000: Version 10.0

• Stealthwatch V6.10: Version 6.0

• Symantec Content Analysis: Version 7.0

Change

Azure Active Directory: Version 25.0

• Added the ability to fetch last login time information to the following actions:

  • Enrich User

  • Get Manager Contact Details

Azure API: Version 3.0

• Added predefined widget to the following action:

  • Ping

Feature

Microsoft Graph Security: Version 26.0

• Added predefined widget to the following action:

  • Get Incident

Feature

Google Cloud IAM: Version 20.0

• The following new action has been added:

  • Rotate Service Account Keys

Feature

Siemplify: Version 106.0

• The following new action has been added:

  • Search Cases

• Added predefined widget to the following action:

  • Search Cases

Feature

Microsoft Defender ATP: Version 30.0

• The following new actions have been added:

  • Get Machine Recommendations

  • Get Machine Vulnerabilities

  • Get User Related Alerts

Change

BitSight: Version 12.0

• IIntroduced Light Theme compatibility for the predefined widget of the following action:

  • Get Company Details

Change

RSA NetWitness Platform: Version 16.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Update Incident

Change

CyberArk Credential Provider: Version 3.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Application Password Value

  • Run CLI Application Password SDK Command

Change

CrowdStrike Falcon: Version 75.0

• Added offline queueing support to the following actions:

  • Execute Command

  • Run Script

Change

MobileIron: Version 6.0

• Integration: The integration's source code is now publicly available on Github.

Change

FireEye HX: Version 22.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Acknowledge Alert Groups

  • Get Indicator

Change

Anomali ThreatStream: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Related Associations

  • Get Related Entities

Change

HashiCorp Vault: Version 6.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Generate AWS Credentials

  • List AWS Roles

  • List Key-Value Secret Keys

  • Read Key-Value Secret

Change

AWS WAF: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Rule Groups

  • List Web ACLs

Change

Microsoft Graph Security: Version 26.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Alert

Change

JoeSandbox: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Detonate File

Change

ThreatQ: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Attribute

  • Add Source

  • Create Adversary

  • Create Event

  • Create Indicator

  • Create Object

  • Link Objects

Change

Symantec Endpoint Security Complete Cloud: Version 8.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Symantec Endpoint Security Complete Cloud

Change

EmailV2: Version 40.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Delete Email

  • Forward Email

  • Save Email Attachments To Case

  • Send Email

  • Send Thread Reply

  • Wait for Email from User

Change

Cofense Triage: Version 20.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Tags To Report

  • Categorize Report

  • Download Report Email

  • Download Report Preview

  • Get Report Reporters

Change

CA Service Desk Manager: Version 26.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Wait For Status Change

Change

Microsoft Defender ATP: Version 30.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Update Alert

Change

Akamai: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Activate Client List

  • Activate Network List

  • Add Items To Network List

  • Remove Items From Network List

Change

SSH: Version 20.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Connections

  • List iptables Rules

  • List Processes

  • Run Command

Change

Microsoft Azure Sentinel: Version 62.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Comment to Incident

  • Create Alert Rule

  • Create Custom Hunting Rule

  • Get Alert Rule Details

  • Get Custom Hunting Rule Details

  • Get Incident Statistic

  • Update Alert Rule

  • Update Custom Hunting Rule

  • Update Incident Details

  • Update Incident Details v2

  • Update Incident Labels

  • Update Incident Labels v2

Change

Google Cloud Compute: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To Firewall Rule

  • Add Network Tags

  • Delete Instance

  • Execute VM Patch Job

  • Remove IP From Firewall Rule

  • Remove Network Tags

  • Start Instance

  • Stop Instance

  • Update Firewall Rule

Change

Microsoft Graph Mail Delegated: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Forward Email

  • Save Email to the Case

  • Send Email

  • Send Email HTML

  • Send Thread Reply

  • Send Vote Email

  • Wait For Email From User

  • Wait For Vote Email Results

Change

Extrahop: Version 8.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Update Detection

Change

Palo Alto Cortex XDR: Version 26.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Incident Details

  • Query

Change

Recorded Future: Version 21.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Alert Details

Change

VSphere: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get System Info

Change

FireEye CM: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IOC Feed

  • Download Alert Artifacts

Change

Tenable.io: Version 16.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Scan Endpoints

Change

Remote Agent Utilities: Version 7.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Serialize A File

Change

FireEye Helix: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Archive Search

  • Get Alert Details

  • Index Search

Change

Okta: Version 16.0

• Integration: Added support for OAuth authentication.

Change

Office 365 CloudApp Security: Version 25.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To IP Address Range

  • Create IP Address Range

  • Remove IP From IP Address Range

Change

Palo Alto Prisma Cloud: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Enrich Assets

Change

Google Cloud Armor: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add a Rule to a Security Policy

  • Create a Security Policy

  • Update a Security Policy

Change

Redis: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add To List

  • Get List

Change

Carbon Black Response: Version 38.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get FileMod Data For Process

  • Get Process Tree Data

Change

Microsoft Graph Mail: Version 39.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Forward Email

  • Save Email to the Case

  • Send Email

  • Send Email HTML

  • Send Thread Reply

  • Send Vote Email

  • Wait For Email From User

  • Wait For Vote Email Results

Change

NessusScanner: Version 12.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Scan Templates

Change

Atlassian Confluence Server: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Child Pages

  • Get Page by ID

  • Get Page Comments

  • List Pages

Change

Slack: Version 29.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Build Block

  • Create Channel

  • Get User Details

  • Get User Details By Id

  • Rename Channel

  • Wait For Reply

  • Wait For Reply With Webhook

Change

McAfee ATD: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Report

  • Submit File

Change

Symantec ICDX: Version 9.0

• Integration: The integration's source code is now publicly available on Github.

Change

McAfee NSM: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Alert Info Data

Change

Cloudflare: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Firewall Rule

  • Create Rule List

  • Update Firewall Rule

Change

Rapid7 InsightIDR: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Saved Query

  • Set Investigation Assignee

  • Set Investigation Status

  • Update Investigation

Change

Exchange Extension Pack: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Domains to Exchange-Siemplify Mail Flow Rules

  • Add Senders to Exchange-Siemplify Mail Flow Rule

  • Purge Compliance Search Results

  • Remove Domains from Exchange-Siemplify Mail Flow Rules

  • Remove Senders from Exchange-Siemplify Mail Flow Rules

  • Run Compliance Search

Change

CSV: Version 40.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Save Json To CSV

Change

Mandiant ASM: Version 12.0

• IIntroduced Light Theme compatibility for the predefined widget of the following action:

  • Update Issue

Change

Shodan: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • DNS Resolve

  • DNS Reverse

  • Get Api Info

Change

Google Kubernetes Engine: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Operation Status

  • List Clusters

  • List Node Pools

  • List Operations

  • Set Cluster Addons

  • Set Cluster Labels

  • Set Node Autoscaling

  • Set Node Count

  • Set Node Pool Management

Change

SiemplifyUtilities: Version 28.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Delete File

  • Filter JSON

  • Get Deployment URL

  • List Operations

  • Parse EML to JSON

Change

Anomali: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Related Associations

Change

Reversinglabs A1000: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Upload File

Change

CyberArk PAM: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Account Password Value

Change

Jira: Version 55.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Alert Issue

  • Create Issue

  • List Issues

  • Update Issue

Change

Ivanti Endpoint Manager: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Query

  • List Column Set Fields

  • List Column Sets

  • List Delivery Methods

  • List Packages

  • List Queries

Change

Check Point Firewall: Version 15.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add a SAM Rule

  • Remove SAM Rule

  • Run Script

Change

Any.Run: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • AnalyzeFile

  • AnalyzeFileURL

  • AnalyzeURL

Change

Carbon Black Protection: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get System Info

Change

LogRhythm: Version 22.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Note To Case

  • Create Cas

  • Download Case Files

  • Update Case

Change

BMC Remedy ITSM: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Incident

  • Create Record

  • Wait For Incident Fields Update

  • Wait For Record Fields Update

Change

AlienVault USM Anywhere: Version 35.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Alarm Details

Change

Zoho Desk: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Comment To Ticket

  • Create Ticket

  • Update Ticket

Change

AWS GuardDuty: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create a Detector

  • Create a Trusted IP List

  • Create Threat Intelligence Set

  • Get all Trusted IP lists

  • Get Finding Details

  • List Detectors

  • List Findings for a Detector

  • List Threat Intelligence Sets

Change

AWS Elastic Compute Cloud (EC2): Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Instances

  • List Security Groups

  • Take Snapshot

Change

Cybereason: Version 24.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Malop

  • List Malop Processes

  • List Reputation Items

Change

Rapid7 InsightVm: Version 15.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Scan Results

  • Launch Scan

Change

Cisco AMP: Version 22.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Group

  • Get File Lists By Policy

  • Get Groups

  • Get Policies

Change

Trend Micro Cloud App Security: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Enrich Entities

Change

CiscoUmbrella: Version 18.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Malicious Domains

Change

Solar Winds Orion: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Enrich Endpoint

  • Execute Entity Query

  • Execute Query

Change

Tenable Security Center: Version 21.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To IP List Asset

  • Create IP List Asset

  • Get Report

  • Get Scan Results

  • Run Asset Scan

Change

Gmail: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Forward Email

  • Save Email To The Case

  • Send Email

  • Send Thread Reply

Change

FireEye AX: Version 8.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Appliance Details

Change

FortiAnalyzer: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Comment To Alert

  • Update Alert

Change

WMI: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • GetSystemInfo

Change

Google Chat: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Send Advanced Message

  • Send Message

Change

SentinelOneV2: Version 47.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Device Control Rule

  • Download Threat File

  • Enrich Endpoint

  • Get System Status

  • Update Alert

  • Update Device Control Rule

Change

Google Translate: Version 6.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Translate Text

  • List Languages

Change

Exchange: Version 122.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Save Mail Attachments To The Case

  • Send Mail

  • Send Thread Reply

  • Send Vote Mail

  • Wait for mail from user

  • Wait for Vote Mail Results

Change

Symantec ATP: Version 12.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Incident Comments

Change

Azure API: Version 3.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Execute HTTP Request

Change

Tanium: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Question

  • Download File

  • Get Question Results

Change

Site24x7: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Generate Refresh Token

Change

ConnectWise: Version 21.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Attachment To Ticket

  • Get Ticket

Change

Cisco Threat Grid: Version 17.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Upload Sample

Change

Zendesk: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Ticket Details

  • Search Tickets

Change

Symantec Endpoint Protection 12: Version 15.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • GetReport

Change

ServiceNow: Version 62.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Comment To Record

  • Add Parent Incident

  • Create Alert Incident

  • Create Incident

  • Create Record

  • Get Incident

  • Get Oauth Token

  • Get Record Details

  • Update Incident

  • Update Record

  • Wait For Field Update

  • Wait For Status Update

Change

Cuckoo: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Detonate File

  • Get Report

Change

Sophos: Version 20.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Alert Actions

Change

IronPort: Version 15.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get All Recipients By Sender

  • Get All Recipients By Subject

  • Get Report

Change

Lastline: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Search Analysis History

  • Submit File

  • Submit URL

Change

F5 BIG-IP iControl API: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To Address List

  • Add IP To Data Group

  • Add Port To Port List

  • Create Address List

  • Create Data Group

  • Create iRule

  • Create Port List

  • Remove IP From Address List

  • Remove IP From Data Group

  • Remove Port From Port List

  • Update iRule

Change

Palo Alto Panorama: Version 35.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Ips to group

  • Block ips in policy

  • Block Urls

  • Edit Blocked Applications

  • Get Blocked Applications

  • Remove Ips from group

  • Unblock ips in policy

  • Unblock Urls

Change

Cynet: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Hash Query

  • Remediation Status

Change

Trend Vision One: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Email

  • Update Workbench Alert

Change

MalShare: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Upload File

Change

Tor: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Is Exit Node

Change

Qualys VM: Version 24.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Report

  • List Ips

Change

BMC Helix Remedyforce: Version 17.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Record

  • Wait For Fields Update

Change

AlienVault USM Appliance: Version 25.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get PCAP Files For Events

Change

Service Desk Plus: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Request

  • Get Request

  • Update Request

Change

FireEye NX: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Download Alert Artifacts

Change

Intezer: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Alert

  • Submit Alert

  • Submit File

  • Submit Suspicious Email

Change

MISP: Version 37.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Event

  • Create File Misp Object

  • Create IP-Port Misp Object

  • Create network-connection Misp Object

  • Create Virustotal-Report Object

  • Download File

  • Publish Event

  • Unpublish Event

  • Upload File

Change

Palo Alto Next Gen Firewall: Version 28.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Ips to group

  • Block ips in policy

  • Block Urls

  • Edit Blocked Applications

  • Get Blocked Applications

  • Remove Ips from group

  • Unblock ips in policy

  • Unblock Urls

Change

Illusive Networks: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Deceptive Items

Change

Freshworks Freshservice: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Agent

  • Deactivate Agent

  • Update Agent

Change

Splunk: Version 64.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Submit Event

Change

AlgoSec: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Allow IP

  • Block IP

  • Wait for Change Request Status Update

Change

Salesforce: Version 17.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Case

  • Search Records

Change

RSA Archer: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Incident Journal Entry

  • Create Incident

  • Get Incident Details

  • Update Incident

Change

QRadar: Version 66.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • QRadar AQL Search

  • QRadar Simple AQL Search

  • Update Offense

Change

Mimecast: Version 15.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Create Block Sender Policy

Change

Sumo Logic Cloud SIEM: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Tags To Insight

  • Add Comment To Insight

  • Update Insight

Change

ArcSight: Version 45.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Resources

Change

Microsoft Teams: Version 35.0

• Integration: Updated dependencies.

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Channel

  • Create Channel

  • Send Chat Message

  • Send Message Reply

  • Wait For Reply

Change

Service Desk Plus V3: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Note

  • Add Note And Wait For Reply

  • Close Request

  • Create Alert Request

  • Create Request

  • Create Request - Dropdown Lists

  • Get Request

  • Update Request

  • Wait For Field Update

  • Wait For Status Update

Change

AWS CloudWatch: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Log Group

  • Create Log Stream

Change

Endgame: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Investigation Details

Change

Falcon Sandbox: Version 20.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Wait For Job and Fetch Report

Change

Google Cloud Recommender: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Apply IAM Recommendations

Change

HTTP Rest API: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Data

  • Post Data

Change

Google Threat Intelligence: Version 13.0

• Improved loading for predefined widgets of the following actions:

  • Enrich Entities

  • Enrich IOC

• Removed the usage of a deprecated API endpoint and the Retrieve AI Summary parameter from the following action:

  • Submit File

Change

IntSights: Version 26.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Download Alert CSV

Microsoft Graph Mail: Version 37.0

• A new predefined widget has been added to the following action:

  • Delete Email

Feature

CrowdStrike Falcon: Version 73.0

• The following new action has been added:

  • Hide Hosts

Feature

Endgame: Version 73.0

• New predefined widgets have been added to following actions:

  • Get Endpoints

  • Get Host Isolation Config

  • Hunt File

  • Hunt IP

  • Hunt Process

  • Hunt Registry

  • Hunt User

  • List Investigations

Feature

Microsoft Graph Security: Version 24.0

• A new predefined widget has been added to the following action:

  • List Incidents

Change

Azure Security Center: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Regulatory Standards

  • List Regulatory Standard Controls

Change

Zoho Desk: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Ticket Details

Change

Stellar Cyber Starlight: Version 17.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced Search

  • Simple Search

Change

Siemplify ThreatFuse: Version 17.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Related Associations

  • Get Related Domains

  • Get Related Email Addresses

  • Get Related Hashes

  • Get Related IPs

  • Get Related URLs

  • Submit Observables

Change

Devo: Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced Query

  • Simple Query

Change

AWS CloudWatch: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Log Groups

  • List Log Streams

  • Search Log Events

Change

ZScaler: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Url Categories

Change

Google Workspace: Version 24.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Members To Group

  • Block Extension

  • Create Group

  • Create OU

  • Create User

  • Delete Extension

  • List Group Members

  • List OU Of Account

  • List Users

  • Update OU

  • Update User

Change

Azure Active Directory: Version 23.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Groups

  • List Members in the Group

Change

Trend Micro Cloud App Security: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Entity Email Search

Change

Tanium: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Task Details

  • List Connections

Change

Intezer: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Detonate File

  • Detonate Hash

  • Detonate URL

  • Get File Report

  • Get URL Report

  • Index File

Change

RSA NetWitness: Version 18.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Run General Query

Change

MongoDB: Version 8.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Free Query

Change

Exchange: Version 120.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Block Sender by Message ID

  • Delete Mail

  • Download Attachments

  • Extract EML Data

  • List Exchange-Siemplify Inbox Rules

  • Move Mail To Folder

  • Search Mails

  • Unblock Sender by Message ID

Change

ThreatQ: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Events

  • List Related Objects

Change

RSA NetWitness Platform: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Run General Query

Change

Carbon Black Response: Version 36.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Binary Free Query

  • Process Free Query

Change

Symantec Endpoint Protection: Version 19.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Report And Enrich

  • GetReport

  • ListEndpoints

  • ListGroups

Change

AlienVault USM Anywhere: Version 33.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Events

Change

Mandiant Digital Threat Monitoring: Version 5.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Update Alert

Change

FireEye CM: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Custom Rules File

  • Download Quarantined Email

  • List IOC Feeds

  • List Quarantined Emails

Change

Google Threat Intelligence: Version 11.0

• Updated is_suspicious and is_risky logic handling in the following actions:

  • Enrich Entities

  • Submit File

Change

Shodan: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Search

  • SearchForExploits

Change

Snowflake: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Query

  • Execute Simple Query

Change

Proofpoint Threat Protection: Version 2.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Allow List Entries

  • Get Block List Entries

Change

Vectra: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Triage Rule Details

Change

MSSQL: Version 18.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • RunSQLQuery

Change

Rapid7 InsightVm: Version 13.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Scans

Change

ServiceNow: Version 60.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Attachment

  • Download Attachments

  • Get Child Incident Details

  • Get CMDB Record Details

  • Get User Details

  • List CMDB Records

  • List Record Comments

  • Wait For Comments

Change

CiscoUmbrella: Version 16.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Top Domains

Change

RSA NetWitness EDR: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To Blacklist

  • Add URL To Blacklist

Change

Microsoft 365 Defender: Version 24.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Query

  • Execute Entity Query

  • Execute Query

Change

Easy Vista: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get EasyVista Ticket

Change

Sumologic: Version 18.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Search

Change

Symantec Endpoint Security Complete Cloud: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Device Groups

Change

Google Rapid Response (GRR): Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Hunt Details

  • List Hunts

  • Start a Hunt

  • Stop a Hunt

Change

TruSTAR: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Related IOCs

  • Get Related Reports

  • List Enclaves

Change

FireEye AX: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Submit File

Change

McAfee ATD: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Analyzer Profiles

Change

Mimecast: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced Archive Search

  • Simple Archive Search

Change

Microsoft Azure Sentinel: Version 60.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Alert Rules

  • List Custom Hunting Rules

  • List Incidents

  • Run Custom Hunting Rule Query

  • Run KQL Query

Change

ElasticSearch: Version 42.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced ES Search

  • DSL Search

  • Simple ES Search

Change

FireEye HX: Version 20.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Alert Group Details

  • Get Alerts

  • Get Alerts in Alert Group

  • Get Indicators

Change

FortiGate: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Address Groups

  • List Policies

Change

CBProtection: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Find File

Change

BlueLiv: Version 11.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Add Comment to a Threat

Change

MISP: Version 35.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Attribute

  • Add Sighting to an Attribute

  • Add Tag to an Attribute

  • Add Tag to an Event

  • Create Url Misp Object

  • Delete an Attribute

  • Delete an Event

  • List Event Objects

  • List Sightings of an Attribute

  • Remove Tag from an Attribute

  • Remove Tag from an Event

Change

Exchange Extension Pack: Version 11.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Fetch Compliance Search Results

  • List Exchange-Siemplify Mail Flow Rules

Change

Google Cloud Storage: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download an Object From a Bucket

  • Get a Bucket's Access Control List

  • List Bucket Objects

  • List Buckets

  • Upload an Object To a Bucket

Change

Microsoft Graph Mail Delegated: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Delete Email

  • Download Attachments from Email

  • Extract Data from Attached EML

  • Move Email To Folder

  • Run Microsoft Search Query

  • Search Emails

Change

Ivanti Endpoint Manager: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Task

  • Scan Endpoints

Change

Akamai: Version 3.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Items To Client List

  • Get Client Lists

  • Get Network Lists

  • Remove Items From Client List

Change

CyberArk PAM: Version 7.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Accounts

Change

Nozomi Networks: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Vulnerabilities

  • Run a Query

Change

iBoss: Version 12.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Policy Block List Entries

Change

FireEye EX: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Alert Artifacts

  • Download Quarantined Email

  • List Quarantined Emails

Change

AWS Security Hub: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Insight

  • Get Insight Details

Change

Mandiant ASM: Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get ASM Entity Details

  • Search Issues

Change

Cisco Orbital: Version 17.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Execute Query

Change

IronScales: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Incident Details

  • Get Incident Mitigation Details

  • Get Mitigation Impersonation Detail

  • Get Mitigations Per Mailbox

Change

Google Cloud IAM: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Role

  • Create Service Account

  • Delete Role

  • List Roles

  • List Service Accounts

Change

Armis: Version 13.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Alert Connections

Change

Attivo: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Critical ThreatPath

  • List Service ThreatPaths

  • List Vulnerability Hosts

Change

Falcon Sandbox: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Analyze File

  • Analyze File URL

  • Search

Change

Tenable.io: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Vulnerability Details

  • List Plugin Families

  • List Policies

  • List Scanners

Change

Google Chat: Version 5.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Spaces

Change

IntSights: Version 24.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Alert Image

Change

Jira: Version 53.0

• Integration: Added support for service account token based authentication.

• Integration: Updated issue object handling.

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Attachments

  • Get Issues

  • List Relation Types

Change

Google BigQuery: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Run Custom Query

  • Run SQL Query

Change

ArcSight: Version 43.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Activelist Entries

  • Get Query Results

  • Get Report

  • Is Value In Activelist Column

  • Search

Change

Check Point Firewall: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Log Attachment

  • List Layers On Site

  • List Policies On Site

  • Show Logs

Change

FortiAnalyzer: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Search Logs

Change

Microsoft Defender ATP: Version 28.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Isolate Machine Task

  • Create Run Antivirus Scan Task

  • Create Stop And Quarantine File Specific Machine Task

  • Create Unisolate Machine Task

  • Get Current Task Status

  • List Alerts

  • List Indicators

  • List Machines

  • Run Advanced Hunting Query

  • Wait Task Status

Change

Microsoft Teams: Version 33.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Chats

  • List Teams

  • List Users

  • Send Message

Change

Recorded Future: Version 19.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Update Alert

Change

Active Directory: Version 39.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Group Members

  • Search Active Directory

Change

Cofense Triage: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Report Headers

  • List Categories

  • List Playbooks

  • List Reports Related To Threat Indicators

Change

ElasticSearchV7: Version 20.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced ES Search

  • DSL Search

  • Simple ES Search

Change

BMC Remedy ITSM: Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Incident Details

  • Get Record Details

Change

Cloudflare: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add IP To Rule List

  • List Firewall Rules

Change

OpenSearch: Version 2.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Advanced OS Search

  • DSL Search

  • Simple OS Search

Change

Microsoft Graph Mail: Version 37.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Attachments from Email

  • Extract Data from Attached EML

  • Move Email To Folder

  • Search Emails

Change

F5 BIG-IP Access Policy Manager: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Active Sessions

Change

McAfee Mvision EPO: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Endpoints In Group

  • List Groups

  • List Tags

Change

Palo Alto Cortex XDR: Version 24.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Execute XQL Search

Change

XForce: Version 17.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get IP By Category

Change

Okta: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get User

Change

Microsoft Intune: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Managed Devices

Change

F5 BIG-IP iControl API: Version 5.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Address Lists

  • List Data Groups

  • List Port Lists

  • List iRules

Change

AppSheet: Version 4.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Record

  • Delete Record

  • List Tables

  • Search Records

  • Update Record

Change

McAfee ESM: Version 44.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Send Advanced Query To ESM

  • Send Query To ESM

Change

Google Cloud Recommender: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Recommendation

  • List Recommendations

  • Update Recommendation

Change

Any.Run: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Search Report History

Change

FireEye Helix: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Lists

  • Get List Items

Change

Area1: Version 7.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get Recent Indicators

Change

ExabeamAdvancedAnalytics: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Comments To Entity

  • Create Watchlist

  • List Watchlist Items

  • List Watchlists

Change

Azure Monitor: Version 2.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Search Logs

Change

Rapid7 InsightIDR: Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Investigations

  • List Saved Queries

  • Run Saved Query

Change

Amazon Macie: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Custom Data Identifier

  • List Findings

Change

AWS IAM Access Analyzer: Version 8.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Scan Resources

Change

ProofPoint TAP: Version 13.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • DecodeURL

  • Get Threat Forensics

  • GetCampaign

  • List Campaigns

  • Search Events

Change

Splunk: Version 62.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Entity Query

  • SplunkQuery

Change

LogPoint: Version 18.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Entity Query

  • Execute Query

  • List Repos

Change

BitSight: Version 10.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Company Highlights

  • List Company Vulnerabilities

Change

WMI: Version 12.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • ListServices

  • ListUsers

  • RunQuery

Change

AWS Identity and Access Management (IAM): Version .0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create a Group

  • Create a Policy

  • Create a User

  • List Groups

  • List Policies

  • List Users

Change

Fortinet FortiSIEM: Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Query

  • Execute Simple Query

Change

Humio: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Search

  • Execute Simple Search

Change

AlgoSec: Version 5.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Templates

Change

AWS WAF: Version 9.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create IP Set

  • Create Regex Pattern Set

  • Create Rule Group

  • Create Web ACL

  • List IP Sets

  • List Regex Pattern Sets

Change

CA Service Desk Manager: Version 24.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Search Tickets

  • Sync Ticket History

Change

Freshworks Freshservice: Version 16.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Ticket Time Entry

  • Add a Ticket Note

  • Add a Ticket Reply

  • Create Requester

  • Create Ticket

  • List Agents

  • List Requesters

  • List Ticket Conversations

  • List Ticket Time Entries

  • List Tickets

  • Update Requester

  • Update Ticket

  • Update Ticket Time Entry

Change

BMC Helix RemedyForce: Version 15.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Query

  • Execute Simple Query

  • Get Record Details

  • List Record Types

Change

AWS S3: Version 6.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download File From Bucket

  • Get Bucket Policy

  • List Bucket Objects

  • List Buckets

  • Upload File To Bucket

Change

Cybereason: Version 22.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Investigation Search

  • Execute Simple Investigation Search

  • List Malop Affected Machines

  • List Malop Remediations

  • List Processes

  • List files

  • Remediate Malop

Change

SCCM: Version 19.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Run WQL Query

Change

Netskope: Version 15.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Alerts

  • List Clients

  • List Events

Change

Qradar: Version .0

• Optimized the caching fetched offenses logic in the following connectors:

  • Qradar Correlation Events Connector V2

  • Qradar Offenses Connector

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Rule MITRE Coverage

  • List Reference Maps

  • List Reference Maps of Sets

  • List Reference Sets

  • List Reference Tables

  • Lookup for a Key in Reference Map

  • Lookup for a Key in Reference Map of Sets

  • Lookup for a Value in Reference Map

  • Lookup for a Value in Reference Map of Sets

  • Lookup for a Value in Reference Set

  • Lookup for a Value in Reference Tables

Change

Google Cloud Compute: Version 14.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Labels To Instance

  • Get Instance IAM Policy

  • List Instances

  • Remove External IP Addresses

  • Set Instance IAM Policy

Change

Cylance: Version 17.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Global List

  • Get Threats

Change

EmailV2: Version 38.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Search Email

Change

McAfee EPO: Version 35.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Execute Custom Query

  • Execute Entity Query

  • Execute Query By ID

  • List Queries

  • List Tasks

Change

ArcSight Logger: Version 10.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Send Query

Change

SonicWall-Beta: Version 7.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Address Groups

  • List URI Groups

  • List URI Lists

Change

VSphere: Version 9.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Vms

Change

SiemplifyUtilities: Version 26.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Export Entities as OpenIOC File

  • Extract Top From JSON

Change

Office 365 CloudApp Security: Version 23.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Enrich Entities

  • List Files

Change

Salesforce: Version 15.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Cases

Change

AWS Elastic Compute Cloud (EC2): Version 8.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Start Instance

  • Stop Instance

  • Terminate Instance

Change

McAfee Mvision ePO V2: Version 6.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • List Devices

  • List Tags

Change

Anomali ThreatStream: Version 12.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Submit Observables

Change

Automox: Version 6.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Policies

Change

Microsoft Graph Security: Version 24.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Alerts

Change

Qualys VM: Version 22.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Download Vm Scan Results

  • Launch VM Scan And Fetch Results

  • List Groups

  • List Reports

  • List Scans

Change

Cloud Logging: Version 4.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Execute Query

Change

Cisco ISE: Version 14.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • List Endpoint Identity Group

Change

SentinelOneV2: Version 45.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Create Path Exclusion Record

  • Get Blacklist

  • Get Deep Visibility Query Result

  • Get Site Agents

  • Get Threats

  • Initiate Deep Visibility Query

  • List Sites

  • Mark as Threat

  • Mitigate Threat

  • Resolve Threat

Change

Palo Alto Panorama: Version 33.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Correlated Traffic Between IPs

  • Search logs

Change

Cisco AMP: Version 20.0

• Introduced Light Theme compatibility for the predefined widget of the following action:

  • Get File List Items

Change

Slack: Version 27.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Get Channel Or User Conversation History

  • List Channels

  • List Users

  • Send Interactive Message

Change

LogRhythm: Version 20.0

• Introduced Light Theme compatibility for predefined widgets of the following actions:

  • Add Alarm To Case

  • Attach File To Case

  • Get Alarm Details

  • List Case Evidence

Microsoft Azure Sentinel: Version 59.0

• The following new job has been added:

  • Sync Incidents V2

Change

Microsoft Azure Sentinel: Version 59.0

• Deprecated the following job:

  • Sync Incidents V2

CrowdStrike Falcon: Version 72.0

• Updated the handling of Days To Expire in the following action:

  • Upload IOCs

Change

Case Federation: Version 7.0

• Integration: Updated to support self-service configuration.

Change

ProofPoint TAP: Version 12.0

• Updated input handling in the following action:

  • DecodeURL

Change

Microsoft Teams: Version 32.0

• Updated reply handling in the following action:

  • Wait for Reply

Change

Introduced Light Theme compatibility for predefined widgets in the following integrations:

• CrowdStrike Falcon: Version 72.0

• Google Chronicle: Version 79.0

• Google Cloud API: Version 8.0

• Google Cloud Asset Inventory: Version 13.0

• Google Security Command Center: Version 16.0

• Google Threat Intelligence: Version 10.0

• HTTP v2: Version 13.0

• MITRE ATT&CK: Version 17.0

• ScreenshotMachine: Version 14.0

• Siemplify: Version 104.0

• UrlScan.io: Version 28.0

• Vertex AI: Version 5.0

• VirusTotalV3: Version 38.0

• Vmware Carbon Black Cloud: Version 37.0

Siemplify: Version 103.0

• The following new job has been added:

  • Response Integration & Connector Upgrade

Feature

Akamai: Version 2.0

• The following new action has been added:

  • Activate Client List

Change

Splunk: Version 61.0

• Updated input handling in the following action:

  • Update Notable Events

Change

CrowdStrike Falcon: Version 71.0

• Added the ability to define an expiration date for IOCs to the following action:

  • Upload IOCs

• Added support for hidden hosts in the following action:

  • Get Host Information

Change

Google Security Command Center: Version 15.0

• Updated the processing of mute states in the following action:

  • List Asset Vulnerabilities

Change

AWS GuardDuty: Version 9.0

• Updated severity handling in the following connector:

  • AWS GuardDuty - Findings Connector

Change

Microsoft Graph Mail Delegated: Version 13.0

• Updated folder handling in the following actions:

  • Forward Email

  • Save Email To Case

  • Send Email

  • Send Email HTML

  • Send Thread Reply

  • Send Vote Email

  • Wait For Email From User

  • Wait For Vote Email Results

• Updated folder handling in the following connector:

  • Microsoft Graph Mail Delegated Connector

Change

Google Chronicle: Version 78.0

• Updated raw log data processing in the following actions:

  • Get Detection Details

  • Execute UDM Query

Change

Microsoft Graph Mail: Version 36.0

• Updated folder handling in the following actions:

  • Forward Email

  • Save Email To Case

  • Send Email

  • Send Email HTML

  • Send Thread Reply

  • Send Vote Email

  • Wait For Email From User

  • Wait For Vote Email Results

• Updated folder handling in the following connector:

  • Microsoft Graph Mail Connector

Google Workspace: Version 23.0

• The following new action has been added:

  • Remove Extension

Change

Google Chronicle: Version 77.0

• Integration: Updated the error handling for Workload Identity authentication.

Change

Microsoft 365 Defender: Version 23.0

• Added support for Graph API to the following actions:

  • Execute Query

  • Execute Custom Query

  • Execute Entity Query

New Proofpoint Threat Protection integration

Change

Cofense Triage: Version 17.0

• Optimized the report processing in the following connector:

  • Cofense Triage - Reports Connector

Change

Qualys VM: Version 21.0

• Integration: Added the ability to configure the X-Requested-With header.

Change

QRadar: Version 63.0

• Updated the logic for offense processing in the following connectors:

  • Qradar Correlation Events Connector V2

  • Qradar Offenses Connector

Change

Palo Alto Cortex XDR: Version 23.0

• Added the ability to provide agents using input parameters in the following actions:

  • Scan Endpoint

  • Isolate Endpoint

  • Unisolate Endpoint

Change

Google Chronicle: Version 76.0

• Restored the previous JSON result structure for empty result sets in the following action:

  • Execute UDM Query

Change

Exchange: Version 119.0

• Updated the handling of S/MIME emails sent on MacOS in the following connectors:

  • Exchange - Mail Connector v2 with OAuth Authentication

  • Exchange - Mail Connector v2

Change

CrowdStrike Falcon: Version 70.0

• Deprecated the following actions:

  • Add Incident Comment

  • Update Incident

  • Add Comment to Detection

  • Close Detection

  • Update Detection

• Deprecated the following connectors:

  • CrowdStrike - Detections Connector

  • Crowdstrike - Incidents Connector

CiscoUmbrella: Version 15.0

• The following new actions have been added:

  • Is Domain In Cisco Popularity List

  • List Top Domains

Change

Tenable.io: Version 13.0

• Optimized the asset processing of the following connector:

  • TenableIO - Vulnerabilities Connector

• Updated the entity processing logic of the following actions:

  • Enrich Entities

  • List Endpoint Vulnerabilities

  • Scan Endpoints

Change

Google Threat Intelligence: Version 9.0

• Added the ability to define the data freshness threshold for available hashes to the following action:

  • Submit File

• Added the ability to filter using monitor names to the following connector:

  • Google Threat Intelligence - DTM Alerts Connector

• Integration: Updated the connectivity test method to avoid API quota consumption.

Change

Palo Alto Cortex XDR: Version 22.0

• Updated the event processing and dynamic list handling of the following connector:

  • Palo Alto Cortex XDR Connector

• Added the ability to ignore certain types of artifacts to the following connector:

  • Palo Alto Cortex XDR Connector