Content packs — August 28, 2026

2 files changed, 245 insertions, 159 deletions — view the commit on the mirror.

Two Microsoft fetch fixes: Sentinel's fetch limit and Graph Security's first-fetch timestamp

A two-pack day for two upstream commits (+245/-159). No pack was added or removed.
Both fixes land on incident fetching in a Microsoft integration, so both bear on how much gets ingested rather than on what the integration can do.
AzureSentinel (+197/-151) carries the fetch-limit fix and is near line-for-line — insertions and deletions largely cancel.
MicrosoftGraphSecurity (+48/-8) corrects fetch-incidents filtering on the first fetch timestamp.

Microsoft Sentinel's fetch limit is fixed

#45673 is the day's larger change at +197/-151; the balance of insertions against deletions is that of a rewritten block rather than added capability.
Graph Security fetch-incidents filtering on the first fetch timestamp is corrected

#45675 moves MicrosoftGraphSecurity +48/-8, an addition-weighted change consistent with new filtering logic rather than a replacement.

2 files listed, 2 written up and shaded below.

▸ ▾ AzureSentinel modified +197 −151 +197/-151. Fixes the Microsoft Sentinel fetch limit (#45673), and the day's larger of two changes. Packs/AzureSentinel

Read it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗

Generated by the mirror — not a documentation page, so no diff is kept. The counts above still say how much moved.
▸ ▾ MicrosoftGraphSecurity modified +48 −8 +48/-8. Fixes fetch-incidents filtering on the first fetch timestamp (#45675). Packs/MicrosoftGraphSecurity

Read it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗

Generated by the mirror — not a documentation page, so no diff is kept. The counts above still say how much moved.