Platform Changes
Everything that moved across Cortex — the documentation, the analytics rules, and the content packs.
Covering August 06, 2026, 00:00–24:00 UTC · published August 06, 2026 17:19 UTC.
Still waiting on Documentation and Analytics rules. That sync has not landed for this day, so this is a partial picture rather than the whole one.
Last checked about 15 hours ago. Summaries are written by claude-code/claude-opus-5; the changes themselves are recorded automatically.
Documentation
Not synced yet — nothing has been recorded for this source on this day.
Analytics rules
Not synced yet — nothing has been recorded for this source on this day.
Content packs
7 packs changed +1373 −123Brandefense DRPS joins the catalog; EWS Online Powershell v3 gains transport rule commands
- Brandefense Digital Risk Protection Services 1.0.0 is a new partner pack: a threat intelligence integration with two incident types, eleven incident fields, a classifier and a mapper.
- EWS Extension Online Powershell v3 added
ews-mail-flow-rule-createandews-mail-flow-rule-update, and pinned its EXO Docker version around a Microsoft bug. - Arista Switch fixed ACL modeling for
%ACL-6-IPACCESSevents that carry no interface token, which had been shifting every field one position. - Fixes elsewhere: CrowdStrike Falcon ODS/OFP mirroring, Magnet Automate’s API base path, the generic account enrichment playbook, and a HealthCheck script crash.
- A quiet day otherwise — eight packs, no removals.
- AristaSwitch
- CommonPlaybooks
- CrowdStrikeFalcon
- HealthCheck
- MagnetForensics
- MicrosoftExchangeOnline
- and 1 more
BIOC rules are not tracked yet — that sync signs in to a live Cortex tenant, so there is nowhere for an unattended daily export to run.