🔌 Plugin & API Poller Updates
API Integrations:
-
Resecurity API integration added for threat intelligence ingestion.
-
ESET Protect Cloud poller API added to support cloud-based endpoint visibility.
-
IBM QRadar EDR integration updated to enhance response parsing and data normalization.
-
Google Cloud integration updated to improve log consistency and API reliability.
-
Bitdefender GravityZone integration updated with improved response structure handling.
-
Proxmox Virtual Environment integration updated to support enhanced virtualization data collection.
Plugin Enhancements:
-
Fortigate plugin updated for improved field parsing and compatibility with recent firmware versions.
-
Cisco Switch plugin updated to enhance log parsing reliability and event field mappings.
-
Trend Micro Apex Central plugin updated with expanded detection log support.
-
Sophos Firewall plugin updated to improve threat event normalization and field coverage.
-
Stormshield Netasq plugin updated with improved parsing logic for security event logs.
-
IceWarp Messaging Server plugin updated to enhance message tracking and log field extraction.
-
Aruba ClearPass plugin updated to expand support for authentication and access control event parsing.
🔧 Improvements
-
Added last login time visibility to user accounts for improved system auditing.
-
Enabled support for sending multiple reports via scheduled reporting functionality.