July 09, 2025 - Content Release
This release includes:
- Rule bug fix.
- New device support for Aruba WAP, Oracle Cloud Infrastructure, and Mindpoint SurePass.
- Updated mapper alternate values for Cloudflare Logpush.
Rules
- [Updated] LEGACY-S00005 Possible Black Energy Command and Control
- Corrected rule expression for rootDomain to use correct schema field name.
Log Mappers
- [New] Aruba WAP
- [New] Oracle Cloud Infrastructure Audit Catch All
- [New] Surepass Authentication
- [New] Surepass Cath All
- [New] Surepass Network Event
- [Updated] Cloudflare - Logpush
Parsers
- [New] /Parsers/System/HP/Aruba WAP
- [New] /Parsers/System/Mindpoint Group/Mindpoint SurePass
- [New] /Parsers/System/Oracle/Oracle Cloud Infrastructure