Azure Risky Users

Details
Content
Dependencies
Version History

Download With Dependencies

Azure Risky Users provides access to all at-risk users and risk detections in Azure AD environment.

Pack Contributors:

Martin Ohl

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Martin Ohl

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Integrations

Name	Description
Azure Risky Users	Azure Risky Users provides access to all at-risk users and risk detections in the Azure AD environment.

Integrations

Name	Description
Azure Risky Users	Azure Risky Users provides access to all at-risk users and risk detections in the Azure AD environment.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.1.52 - 10004541 (June 9, 2026)

Integrations

Updated the error message displayed when an invalid or malformed authorization code is provided during Authorization Code flow configuration.

Related pull requests:
- 44467

Download

1.1.51 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.50 - 6169714 (December 7, 2025)

Integrations

Azure Risky Users

You can now use the new azure-risky-users-confirm-safe command to efficiently confirm Azure user(s) as safe following a complete investigation.
You can now use the azure-risky-users-confirm-compromise command to quickly and definitively confirm an Azure user's compromised status.
Updated the Docker image to: demisto/crypto:1.0.0.5490413.

Related pull requests:
- 41858

Download

1.1.49 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.1.48 - R5469292 (October 20, 2025)

Integrations

Azure Risky Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.1.47 - 4431069 (August 5, 2025)

Integrations

Azure Risky Users

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.1.46 - 4419577 (August 4, 2025)

Integrations

Azure Risky Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.1.45 - 3887930 (June 20, 2025)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.3539024.

Related pull requests:
- 40309

Download

1.1.44 - 3481649 (May 21, 2025)

Integrations

Azure Risky Users

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.1.43 - R3380045 (May 12, 2025)

Integrations

Azure Risky Users

Metadata and documentation improvements.

Related pull requests:
- 39095

Download

1.1.42 - R2988287 (March 26, 2025)

Integrations

Azure Risky Users

Code functionality improvements.
Updated the Docker image to: demisto/crypto:1.0.0.117163.

Related pull requests:
- 38093

Download

1.1.41 - 1709192 (November 26, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.114611.

Related pull requests:
- 37375
- 37353

Download

1.1.40 - 1669335 (November 19, 2024)

Integrations

Azure Risky Users

Fixed an issue in MicrosoftApiModule where the GCC High Defender endpoint was incorrect.

Related pull requests:
- 37253

Download

1.1.39 - 1480610 (October 8, 2024)

Integrations

Azure Risky Users

Added infrastructure support for Microsoft Graph Application endpoints.

Related pull requests:
- 36407

Download

1.1.38 - 1244506 (August 5, 2024)

Integrations

Azure Risky Users

Updated the MicrosoftApiModule with exchange_online endpoints.

Related pull requests:
- 34917
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34975
- 34999
- 34913
- 35000
- 34990
- 35002
- 34932
- 34862
- 35005
- 34868
- 34977
- 35009
- 34969
- 34591
- 34693
- 34657
- 34671
- 34681
- 34676
- 34672
- 34372
- 34701
- 34660
- 34684
- 34700
- 34702
- 34696
- 34117
- 34704
- 34706
- 34692
- 33735
- 34714
- 34703
- 34353
- 34725
- 34694
- 34734
- 34640
- 34724
- 34652
- 34443
- 34730
- 34653
- 34732
- 34667
- 34709
- 34755
- 34759
- 32423
- 34598
- 34758
- 34745
- 34762
- 34327
- 34742
- 34474
- 34766
- 34774
- 34782
- 34763
- 34756
- 34747
- 34645
- 34532
- 34675
- 34777
- 34788
- 34804
- 34729
- 34796
- 34691
- 34784
- 34783
- 34765
- 34485
- 34768
- 34593
- 34813
- 34818
- 34832
- 34772
- 34830
- 34833
- 34829
- 34834
- 34839
- 34828
- 34388
- 34838
- 34761
- 34858
- 34861
- 34764
- 34738
- 34538
- 34831
- 34748
- 34846
- 34845
- 34864
- 34817
- 34686
- 34865
- 34867
- 34863
- 34880
- 34876
- 34386
- 34881
- 34884
- 34799
- 34827
- 34883
- 34886
- 34512
- 34887
- 34889
- 34877
- 34904
- 34905
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34608
- 35026
- 35029
- 35015
- 35023
- 34776
- 34654
- 34978
- 34986
- 34938
- 34506
- 35011
- 35014
- 34779
- 35019
- 35039
- 34897
- 35049
- 35016
- 35046
- 35051
- 35040
- 34614
- 32477

Download

1.1.37 - 1120391 (June 25, 2024)

Integrations

Azure Risky Users

Added 3 new arguments to the azure-risky-users-list command:
- order_by
- updated_before
- updated_after
Updated the Docker image to: demisto/crypto:1.0.0.96042.

Related pull requests:
- 34654
- 34978

Download

1.1.36 - 1066075 (June 3, 2024)

Integrations

Azure Risky Users

Fixed an issue in where the GCC endpoints were incorrect in the supported integrations.

Related pull requests:
- 34634

Download

1.1.35 - 1051712 (May 28, 2024)

Integrations

Azure Risky Users

Added support for Microsoft Defender 365 Endpoint in the Microsoft API Module.
Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.

Related pull requests:
- 34495

Download

1.1.34 - 1021616 (May 16, 2024)

Integrations

Azure Risky Users

Fixed an issue in MicrosoftApiModule where the GCC endpoints were incorrect.

Related pull requests:
- 34360

Download

1.1.33 - 919924 (March 28, 2024)

Integrations

Azure Risky Users

Added a timeout value to the retry on rate limit mechanism.

Related pull requests:
- 33566

Download

1.1.32 - 860237 (February 29, 2024)

Integrations

Azure Risky Users

Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.

Related pull requests:
- 31942

Download

1.1.31 - 823153 (February 12, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.87358.

Related pull requests:
- 32843

Download

1.1.30 - 798475 (February 1, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.86361.

Related pull requests:
- 32524

Download

1.1.29 - 760302 (January 14, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.84658.

Related pull requests:
- 32156

Download

1.1.28 - 7209615 (December 19, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.83343.

Related pull requests:
- 31556

Download

1.1.27 - 7066068 (December 4, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.82278.

Related pull requests:
- 31292

Download

1.1.26 - 7029664 (November 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.81835.

Related pull requests:
- 31219

Download

1.1.24 - 6972534 (November 23, 2023)

Integrations

Azure Risky Users

Added support for the page_size and next_token arguments to support pagination in the azure-risky-users-list command instead of the page argument.
Updated the Docker image to: demisto/crypto:1.0.0.80694.

Related pull requests:
- 30986

Download

1.1.23 - 6887992 (November 14, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.80214.

Related pull requests:
- 30883

Download

1.1.22 - 6746892 (October 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.79610.

Related pull requests:
- 30520

Download

1.1.21 - 6608983 (October 15, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.76022.

Related pull requests:
- 30139

Download

1.1.20 - 6441813 (September 27, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.74979.

Related pull requests:
- 29873

Download

1.1.19 - 6226805 (September 3, 2023)

Integrations

Azure Risky Users

Added a moderate retry mechanism for the authorization HTTP request through oproxy.

Related pull requests:
- 29015

Download

1.1.18 - 6170593 (August 28, 2023)

Integrations

Azure Risky Users

Added an infrastructure support for Microsoft Graph Application Endpoints.

Related pull requests:
- 28801

Download

1.1.17 - 6133197 (August 23, 2023)

Integrations

Azure Risky Users

Fixed an issue where instances using version 1.1.16 of the pack could have authentication issues.

Related pull requests:
- 29173

Download

1.1.16 - 6106826 (August 21, 2023)

Integrations

Azure Risky Users

Fixed an issue where changes made to the Authorization code parameter were not being reflected in the integration code, resulting in the continued use of the first parameter.

Related pull requests:
- 29035
- 29173

Download

1.1.15 - 6010750 (August 10, 2023)

Integrations

Azure Risky Users

Added support for Microsoft Defender for Application Endpoints in the Microsoft API Module.

Related pull requests:
- 27705

Download

1.1.14 - 5910354 (July 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.66562.
Maintenance and stability enhancements.

Related pull requests:
- 26482

Download

1.1.13 - R5801668 (July 18, 2023)

Integrations

Azure Risky Users

Improved implementation by adding functionality to the MicrosoftAPIModule to be used in integrations that allow arguments to be set in the instance configuration or within the commands.
Improved implementation by adding functionality to the MicrosoftAPIModule to be used in integrations that use 'tag' as a filter.

Related pull requests:
- 26943

Download

1.1.12 - R5450895 (June 5, 2023)

Integrations

Azure Risky Users

Added support for old docker images which do not have the defusedxml package.

Related pull requests:
- 25670

Download

1.1.11 - 4748070 (March 5, 2023)

Integrations

Azure Risky Users

Added the detected_date_time_before, detected_date_time_after, order_by arguments to the azure-risky-users-risk-detections-list command.
Updated the Docker image to: demisto/crypto:1.0.0.49599.

Related pull requests:
- 24951

Download

1.1.10 - R4718798 (March 1, 2023)

Integrations

Azure Risky Users

Improved implementation of the authorization process with the Oproxy server.
Fixed an issue where linter failed due to pylint errors.
Updated the MicrosoftApiModule to better handle the Auth code authorization flow in the supported integrations.

Related pull requests:
- 24261

Download

1.1.7 - 4560457 (February 7, 2023)

Integrations

Azure Risky Users

Added support for authentication using Azure Managed Identities.
Updated the Docker image to: demisto/crypto:1.0.0.47103.

Related pull requests:
- 23951

Download

1.1.6 - 4474395 (January 26, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.45575.

Related pull requests:
- 24110

Download

1.1.5 - R4372591 (January 11, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.42817.

Related pull requests:
- 23577
- 23518

Download

1.1.4 - 4247670 (December 19, 2022)

Integrations

Azure Risky Users

Fixed an issue where in some rare cases, commands would fail with a 'NoneType' object is not subscriptable message.

Related pull requests:
- 23140

Download

1.1.3 - 4112675 (November 28, 2022)

Integrations

Azure Risky Users

Fixed an issue where error was raised due to api metrics creation attempt from a script execution.

Related pull requests:
- 22476

Download

1.1.2 - 4013107 (November 10, 2022)

Integrations

Azure Risky Users

Internal code improvements.

Related pull requests:
- 22120

Download

1.1.1 - 3982079 (November 6, 2022)

Integrations

Azure Risky Users

Internal code improvements.

Related pull requests:
- 21879

Download

1.1.0 - R3901212 (October 23, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 21461

Download

1.0.7 - 3745478 (September 28, 2022)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.34720.

Related pull requests:
- 21471

Download

1.1.52 - 10004541 (June 9, 2026)

Integrations

Azure Risky Users

Updated the error message displayed when an invalid or malformed authorization code is provided during Authorization Code flow configuration.

Related pull requests:
- 44467

Download

1.1.51 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.50 - 6169714 (December 7, 2025)

Integrations

Azure Risky Users

You can now use the new azure-risky-users-confirm-safe command to efficiently confirm Azure user(s) as safe following a complete investigation.
You can now use the azure-risky-users-confirm-compromise command to quickly and definitively confirm an Azure user's compromised status.
Updated the Docker image to: demisto/crypto:1.0.0.5490413.

Related pull requests:
- 41858

Download

1.1.49 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.1.48 - R5469292 (October 20, 2025)

Integrations

Azure Risky Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.1.47 - 4431069 (August 5, 2025)

Integrations

Azure Risky Users

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.1.46 - 4419577 (August 4, 2025)

Integrations

Azure Risky Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.1.45 - 3887930 (June 20, 2025)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.3539024.

Related pull requests:
- 40309

Download

1.1.44 - 3481649 (May 21, 2025)

Integrations

Azure Risky Users

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.1.43 - R3386461 (May 12, 2025)

Integrations

Azure Risky Users

Metadata and documentation improvements.

Related pull requests:
- 39095

Download

1.1.42 - R2988287 (March 26, 2025)

Integrations

Azure Risky Users

Code functionality improvements.
Updated the Docker image to: demisto/crypto:1.0.0.117163.

Related pull requests:
- 38093

Download

1.1.41 - 1709192 (November 26, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.114611.

Related pull requests:
- 37375
- 37353

Download

1.1.40 - 1669335 (November 19, 2024)

Integrations

Azure Risky Users

Fixed an issue in MicrosoftApiModule where the GCC High Defender endpoint was incorrect.

Related pull requests:
- 37253

Download

1.1.39 - 1480610 (October 8, 2024)

Integrations

Azure Risky Users

Added infrastructure support for Microsoft Graph Application endpoints.

Related pull requests:
- 36407

Download

1.1.38 - 1244506 (August 5, 2024)

Integrations

Azure Risky Users

Updated the MicrosoftApiModule with exchange_online endpoints.

1.1.37 - 1118790 (June 24, 2024)

Integrations

Azure Risky Users

Added 3 new arguments to the azure-risky-users-list command:
- order_by
- updated_before
- updated_after
Updated the Docker image to: demisto/crypto:1.0.0.96042.

Related pull requests:
- 34654
- 34978

Download

1.1.36 - 1066075 (June 3, 2024)

Integrations

Azure Risky Users

Fixed an issue in where the GCC endpoints were incorrect in the supported integrations.

Related pull requests:
- 34634

Download

1.1.35 - 1051712 (May 28, 2024)

Integrations

Azure Risky Users

Added support for Microsoft Defender 365 Endpoint in the Microsoft API Module.
Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.

Related pull requests:
- 34495

Download

1.1.34 - 1021616 (May 16, 2024)

Integrations

Azure Risky Users

Fixed an issue in MicrosoftApiModule where the GCC endpoints were incorrect.

Related pull requests:
- 34360

Download

1.1.33 - 919924 (March 28, 2024)

Integrations

Azure Risky Users

Added a timeout value to the retry on rate limit mechanism.

Related pull requests:
- 33566

Download

1.1.32 - 860237 (February 29, 2024)

Integrations

Azure Risky Users

Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.

Related pull requests:
- 31942

Download

1.1.31 - 821588 (February 12, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.87358.

Related pull requests:
- 32843

Download

1.1.30 - 795978 (January 31, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.86361.

Related pull requests:
- 32524

Download

1.1.29 - 760302 (January 14, 2024)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.84658.

Related pull requests:
- 32156

Download

1.1.28 - 7209615 (December 19, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.83343.

Related pull requests:
- 31556

Download

1.1.27 - 7066068 (December 4, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.82278.

Related pull requests:
- 31292

Download

1.1.26 - 7029664 (November 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.81835.

Related pull requests:
- 31219

Download

1.1.24 - 6972534 (November 23, 2023)

Integrations

Azure Risky Users

Added support for the page_size and next_token arguments to support pagination in the azure-risky-users-list command instead of the page argument.
Updated the Docker image to: demisto/crypto:1.0.0.80694.

Related pull requests:
- 30986

Download

1.1.23 - 6887992 (November 14, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.80214.

Related pull requests:
- 30883

Download

1.1.22 - 6746892 (October 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.79610.

Related pull requests:
- 30520

Download

1.1.21 - 6608983 (October 15, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.76022.

Related pull requests:
- 30139

Download

1.1.20 - 6441813 (September 27, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.74979.

Related pull requests:
- 29873

Download

1.1.19 - 6226805 (September 3, 2023)

Integrations

Azure Risky Users

Added a moderate retry mechanism for the authorization HTTP request through oproxy.

Related pull requests:
- 29015

Download

1.1.18 - 6170593 (August 28, 2023)

Integrations

Azure Risky Users

Added an infrastructure support for Microsoft Graph Application Endpoints.

Related pull requests:
- 28801

Download

1.1.17 - 6133197 (August 23, 2023)

Integrations

Azure Risky Users

Fixed an issue where instances using version 1.1.16 of the pack could have authentication issues.

Related pull requests:
- 29173

Download

1.1.16 - 6106826 (August 21, 2023)

Integrations

Azure Risky Users

Fixed an issue where changes made to the Authorization code parameter were not being reflected in the integration code, resulting in the continued use of the first parameter.

Related pull requests:
- 29035
- 29173

Download

1.1.15 - 6010750 (August 10, 2023)

Integrations

Azure Risky Users

Added support for Microsoft Defender for Application Endpoints in the Microsoft API Module.

Related pull requests:
- 27705

Download

1.1.14 - 5910354 (July 30, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.66562.
Maintenance and stability enhancements.

Related pull requests:
- 26482

Download

1.1.13 - 5640115 (June 28, 2023)

Integrations

Azure Risky Users

Improved implementation by adding functionality to the MicrosoftAPIModule to be used in integrations that allow arguments to be set in the instance configuration or within the commands.
Improved implementation by adding functionality to the MicrosoftAPIModule to be used in integrations that use 'tag' as a filter.

Related pull requests:
- 26943

Download

1.1.12 - R5170573 (May 2, 2023)

Integrations

Azure Risky Users

Added support for old docker images which do not have the defusedxml package.

Related pull requests:
- 25670

Download

1.1.11 - 4748070 (March 5, 2023)

Integrations

Azure Risky Users

Added the detected_date_time_before, detected_date_time_after, order_by arguments to the azure-risky-users-risk-detections-list command.
Updated the Docker image to: demisto/crypto:1.0.0.49599.

Related pull requests:
- 24951

Download

1.1.10 - R4718798 (March 1, 2023)

Integrations

Azure Risky Users

Improved implementation of the authorization process with the Oproxy server.
Fixed an issue where linter failed due to pylint errors.
Updated the MicrosoftApiModule to better handle the Auth code authorization flow in the supported integrations.

Related pull requests:
- 24261

Download

1.1.7 - 4560457 (February 7, 2023)

Integrations

Azure Risky Users

Added support for authentication using Azure Managed Identities.
Updated the Docker image to: demisto/crypto:1.0.0.47103.

Related pull requests:
- 23951

Download

1.1.6 - 4474395 (January 26, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.45575.

Related pull requests:
- 24110

Download

1.1.5 - R4361094 (January 9, 2023)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.42817.

Related pull requests:
- 23577
- 23518

Download

1.1.4 - 4246715 (December 19, 2022)

Integrations

Azure Risky Users

Fixed an issue where in some rare cases, commands would fail with a 'NoneType' object is not subscriptable message.

Related pull requests:
- 23140

Download

1.1.3 - 4112675 (November 28, 2022)

Integrations

Azure Risky Users

Fixed an issue where error was raised due to api metrics creation attempt from a script execution.

Related pull requests:
- 22476

Download

1.1.2 - 4013107 (November 10, 2022)

Integrations

Azure Risky Users

Internal code improvements.

Related pull requests:
- 22120

Download

1.1.1 - 3982079 (November 6, 2022)

Integrations

Azure Risky Users

Internal code improvements.

Related pull requests:
- 21879

Download

1.1.0 - R3901212 (October 23, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 21461

Download

1.0.7 - 3752170 (September 29, 2022)

Integrations

Azure Risky Users

Updated the Docker image to: demisto/crypto:1.0.0.34720.

Related pull requests:
- 21471

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	December 26, 2021
Last Release	June 9, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.