← Platform Changes

Content packs — August 27, 2026

222 files changed, 10921 insertions, 6078 deletionsview the commit on the mirror.

A 222-pack metadata sweep: supportedModules lands on existing fetch-incidents params

  • 222 packs move for 7 upstream commits (+10,921/-6,078). No pack was added or removed.
  • Two of those commits are phases 1 and 2 of one supportedModules sweep over existing Fetch Incidents parameters (CIAC-17795) — the only change large enough to explain a pack count this high.
  • The day is mostly metadata: 196 of the 222 packs delete 3 lines or fewer, and 179 change 30 lines or fewer in total.
  • Two thirds of the 16,999 changed lines sit in seven packs whose insertions and deletions nearly cancel — IronPort, Gem, DatadogCloudSIEM, DataBee, Sysdig, DigitalShadows and Orca.
  • The remaining five commits are product fixes: xdr-xql-generic-query arguments, Intune timestamp parsing, Netskope network-event mapping, and two KeyError fixes.

Highlights

Changes

222 files listed, 14 written up and shaded below.