← Platform Changes

Content packs — August 17, 2026

48 files changed, 7742 insertions, 15092 deletions — view the commit on the mirror.

CyberArk EPM adds Idira OAuth; rasterize's 8.15 fork removed; 21 more packs get identity modeling rules

  • 13 commits, 269 files across 48 packs — the bulk of it CRTX-271523/271526 PRs 2, 4, 5 and 7 of 7, which added a second _2_11 modeling rule to 21 more log sources.
  • CyberArk EPM 1.3.0 gains a third authentication method: CyberArk Identity (Idira ISPSS) OAuth 2.0 client_credentials.
  • The version-forked rasterize_8_15 integration was deleted and folded into the single Rasterize integration, which loses its toversion: 8.14.0 cap.
  • XSUP-74186 restricted the three summary-report scripts to the Cortex XSOAR marketplace and updated 16 playbooks across the compliance and IR packs to skip that task gracefully.
  • Fixes to the Slack and Oracle Cloud Infrastructure event collectors, DBotFindSimilarIncidents and GetDockerImageLatestTag, plus a round of Docker base-image bumps.

Highlights

Changes

48 files listed, 15 written up and shaded below.