v2.3.0

What's Changed

• Add mailMessage Entity Handling by @briandelmsft in #201
• Migrate to Python v3.12
• Upgrade Functions extensions bundle
• Remove cryptography module pinning
• Enhanced 500 series error handling retries
• Scoring module improves handling for data being sent as strings
• Build & Test Automation Update by @briandelmsft in #191
• Additional Pytest test coverage by @briandelmsft in #197
• Merge with changes in main by @briandelmsft in #200
• Additional logging and error handling, updates for 3.10 builds by @briandelmsft in #208
• Build v2.3 - Multiple Enhancements including mailMessage processing by @briandelmsft in #231

Full Changelog: v2.2.0...v2.3.0

v2.2.6 (Preview)

Warning

This preview release is subject to change at any time and may be removed at a later date. This is for testing only.

What's Changed

• Build & Test Automation Update by @briandelmsft in #191
• Additional Pytest test coverage by @briandelmsft in #197
• Merge with changes in main by @briandelmsft in #200
• Add mailMessage Entity Handling by @briandelmsft in #201
• Additional logging and error handling, updates for 3.10 builds by @briandelmsft in #208

Full Changelog: v2.2.0...v2.2.6

v2.2.0

What's Changed

• Adding friendly error to base module body input errors by @briandelmsft in #151
• IP Entity handling update by @briandelmsft in #152
• Updating IP comment logic by @briandelmsft in #153
• Exposure Module Integration by @briandelmsft in #157
• Exposure Management - Initial Feedback by @briandelmsft in #161
• Adding SID detection logic by @briandelmsft in #163
• Minor bug fixes with on prem only accounts, comment cleanup by @briandelmsft in #167
• Adding On prem enrichments by @briandelmsft in #171
• Exposure comments cleanup, test cases by @briandelmsft in #174
• Adding entities to output with no path found by @briandelmsft in #175
• Unsynced Entity support, TI Module update for new tables by @briandelmsft in #180
• v2.2 Release - Exposure Management, TI Update and more by @briandelmsft in #181

Full Changelog: v2.1.0...v2.2.0

v2.1.7 (Preview)

Warning

This preview release is subject to change at any time and may be removed at a later date. This is for testing only.

What's Changed

• Adding friendly error to base module body input errors by @briandelmsft in #151
• IP Entity handling update by @briandelmsft in #152
• Updating IP comment logic by @briandelmsft in #153
• Exposure Module Integration by @briandelmsft in #157

Full Changelog: v2.1.0...v2.1.7

v2.1.0

What's Changed

• Added current STAT version to Base Output by @briandelmsft in #125
• Add a secondary sort to related alerts data by @briandelmsft in #126
• Datetime format and time zone conversion in comments by @briandelmsft in #130
• New Exchange Module / Replaces OOF Module by @briandelmsft in #134
• Adding lookback period to incident comments by @briandelmsft in #138
• Adding scoring for Exchange and updating for Entra by @briandelmsft in #139
• File load function and Exchange fixes by @briandelmsft in #146
• Added Privileged account scoring to scoring module by @briandelmsft in #148
• Exchange Module, Time format and minor updates by @briandelmsft in #135

Full Changelog: v2.0.21...v2.1.0

v2.0.21

What's Changed

• MDCA module deprecation by @briandelmsft in #109
• Adding RBAC check to debug by @briandelmsft in #110
• Adding RBAC role check to debug by @briandelmsft in #111
• KQL search API addition (Basic/Aux Logs) by @briandelmsft in #113
• Base module - Adding enrichment source info by @briandelmsft in #115
• Search API, MDCA Retirement and other updates by @briandelmsft in #114

Full Changelog: v2.0.16...v2.0.21

v2.0.16

What's Changed

• ModuleName addition to all module outputs by @briandelmsft in #101
• Adding debug module to package by @briandelmsft in #103
• Fix for Scoring issue when using new logic apps designer by @briandelmsft in #105

Full Changelog: v2.0.14...v2.0.16

v2.0.14

Important

Some permissions requirements for STAT have changed since v.2.0.0 due to additional functionality and changing APIs, please ensure you run the GrantPermission script when deploying this release. If you have already updated the permissions in v2.0.0 there are no additional changes in v2.0.14

What's Changed

• Workspace ARM ID lookup from Preview to GA API Version by @briandelmsft in #86
• Add STAT version to exception messages by @briandelmsft in #89
• Base Module BUG with GUIDs and TI Module bug with links by @briandelmsft in #97
• Connection Retry Handling & Debug Module & Optional Enrichment Controls by @briandelmsft in #94

Full Changelog: v2.0.8...v2.0.14

v2.0.8

Important

Some permissions requirements for STAT have changed since v.2.0.0 due to additional functionality and changing APIs, please ensure you run the GrantPermission script when deploying this release. If you have already updated the permissions in v2.0.0 there are no additional changes in v2.0.8

What's Changed

• Fail TI module when all TI checks disabled by @briandelmsft in #68
• Changed Entra ID Module defaults to not return null by @briandelmsft in #69
• Base Module comments control fix by @briandelmsft in #70
• Add UserDevices to MDE Module comment output by @briandelmsft in #71
• Update to GitHub Actions by @briandelmsft in #74
• MDE Device Id Enrichment by @briandelmsft in #81

Full Changelog: v2.0.2...v2.0.8

v2.0.2

Important

Some permissions requirements for STAT have changed since v.2.0.0 due to additional functionality and changing APIs, please ensure you run the GrantPermission script when deploying this release. If you have already updated the permissions in v2.0.0 there are no additional changes in v2.0.2

What's Changed

• Adding additional pytests by @briandelmsft in #61
• Bug fix for non-default options in AAD Risks module by @briandelmsft in #62
• Update version.json by @briandelmsft in #63

Full Changelog: v2.0.1...v2.0.2