Apps, Solutions, and Collection Integrations - September Release

New release

AWSO v3.0.0

We're excited to announce the release of AWSO v3.0.0:

• Complete rewrite of the AWSO solution.
• Expanded AWS region support, including non-SAM regions and newly supported regions: Asia Pacific (Melbourne), Asia Pacific (New Zealand), and Europe (Zurich).
• Support for AWS regions launched after August 2022, with the appropriate Load Balancer policies configured automatically.
• Terraform Module support for solution deployment, including release versioning.
• Next-generation application support with out-of-the-box dashboards, monitors, FERs, and metric rules. Learn more.

Automation service integrations

New release

We're excited to announce the release of the following Automation Service Integrations:

• AWS DynamoDB
• Intel 471 Verity
• Mimecast V2

Enhancements

• 1Password. Migrated to 1Password v1 APIs, improved integration stability, and added filtering support to the List Users action.
• AWS CloudWatchLogs. Added new metric actions: Get Metric Data, List Metrics, and Get Metric Statistics.
• Azure AD.
  • Added Delegated (Device Code Flow) authentication support alongside existing Application (Client Credentials) auth.
  • Added new actions (Delegated auth only): Initiate Delegated Auth, Exchange Device Code, and Reset User Password With Writeback.
  • Added new integration resource fields: Authentication Type, Delegated Refresh Token.
• CrowdStrike Falcon Sandbox. Added OAuth 2.0 (Client Credentials) authentication support and new Check Submission Status action.
• Microsoft Graph Security.
  • Migrated Get Alert, Search Alerts, and Update Alert actions to the new Microsoft Graph Security alerts_v2 API. The legacy /security/alerts endpoint is deprecated and will be retired on October 15, 2026.
  • Legacy actions Search Into Alerts and Update Security Alert are retained for backward compatibility, as the alerts_v2 API is not a one-to-one replacement for the legacy API and some alerts may be unavailable through the new endpoint.
• Sumo Logic Cloud SIEM. Added new actions: Get Insight Triage and Check Insight Triage Schedule.

Enhancements

• Improved pagination. TAXII 2 Client 1.0.17, Recorded Future TAXII Client 1.0.10, Unit42 TAXII Client 1.0.9, Nozomi TAXII Client 1.0.9, Dragos TAXII Client 1.0.9, CISA TAXII Client 1.0.14, and 1Password 1.2.8.
• Improved Epoch timestamp parsing. Universal Connector 1.0.36.
• Improved XML response error logging. Qualys 2.1.25.
• Improved retry mechanism. Tenable 2.1.25.
• LiteLLM v1.0.2. Improved index filter handling.
• Updated session and chat endpoints. Claude Compliance v2.0.5 adds support for a new local session endpoint and updates the chat endpoint for cost optimization.