← Platform Changes

Content packs — August 10, 2026

101 files changed, 5883 insertions, 551 deletions — view the commit on the mirror.

Eight new AWS Network Firewall commands; SOC Framework Pack Manager 1.1.0 reworks pack installation

  • Amazon Web Services 2.5.0 added eight aws-network-firewall-* commands covering resource policies, resource tagging and logging configuration.
  • SOC Framework Pack Manager 1.1.0 now upgrades packs in place instead of installing each release as a separate pack, adds a diagnose action, and no longer needs the XSIAMContentPackInstaller automation.
  • Three ingestion and mirroring fixes: CrowdStrike Falcon event fetch past 10,000 records, SplunkPy v2 mirror-out to Splunk Enterprise Security 8.2.x, and Microsoft Defender for Cloud Apps dropping low-volume event types.
  • Cloud Posture remediation content moved off the deprecated azure-nsg-* and azure-disk-* commands onto the new azure-vn-* and azure-compute-* names.
  • An automated Docker bump touched 85 packs, and eight core packs were re-released as dependency locks with no functional change.

Highlights

Changes

101 files listed, 10 written up and shaded below.