Platform Changes

Everything that moved across Cortex — the documentation, the analytics rules, and the content packs.

Covering August 04, 2026, 00:00–24:00 UTC · published August 04, 2026 18:07 UTC.

Still waiting on Documentation and Analytics rules. That sync has not landed for this day, so this is a partial picture rather than the whole one.

Last checked about 16 hours ago. Summaries are written by claude-code/claude-opus-5; the changes themselves are recorded automatically.

Documentation

Not synced yet — nothing has been recorded for this source on this day.

Not synced yet — nothing has been recorded for this source on this day.

4 packs changed +1375 −12

TXOne StellarOne parsing and modeling rules added; Salesforce gains file and Knowledge commands

TXOne StellarOne is a new XSIAM-only pack: parsing and modeling rules for OT endpoint security logs collected over syslog through the Broker VM.
Salesforce 2.2.0 added five commands covering file deletion, public links and Knowledge article lifecycle, and made Credentials optional for unified-connector instances.
Rapid7 InsightVM no longer times out mid-stream on large fetch-assets report downloads.
A quiet day otherwise: four packs moved in total, with no Docker bump.

BIOC rules are not tracked yet — that sync signs in to a live Cortex tenant, so there is nowhere for an unattended daily export to run.