June 25th, 2026 - Content Release

• This content release includes:
  • New Microsoft Azure Defender for Cloud support with dedicated parser and 4 log mappers covering security assessments, posture management, security alerts, and sub-assessments
  • Improved Slack Enterprise Audit parsing with more reliable timestamp handling and null value filtering for skipped mapping fields
  • Fixed AWS WAF parser handling of duplicate values for the action field
  • Additional changes are enumerated below

Log Mappers

• [New] Microsoft Azure Defender for Cloud - Assessments
• [New] Microsoft Azure Defender for Cloud - Posture
• [New] Microsoft Azure Defender for Cloud - Security Alerts
• [New] Microsoft Azure Defender for Cloud - Sub-Assessments
• [Updated] Slack Anomaly Event
• [Updated] Slack Catch All
• [Updated] Slack Login

Parsers

• [New] /Parsers/System/Microsoft/Azure Defender For Cloud
• [Updated] /Parsers/System/AWS/AWS WAF
• [Updated] /Parsers/System/Slack/Slack Enterprise Audit