Microsoft Management Activity API (O365/Azure Events)

Details
Content
Dependencies
Version History

An integration for Microsoft's management activity API, which enables you to fetch content records and manage your subscriptions.

Integrations

Name	Description
Microsoft Management Activity API (O365 Azure Events)	The Microsoft Management Activity API integration enables you to subscribe or unsubscribe to different audits, receive their content, and fetch new content as incidents.

Integrations

Name	Description
Microsoft Management Activity API (O365 Azure Events)	The Microsoft Management Activity API integration enables you to subscribe or unsubscribe to different audits, receive their content, and fetch new content as incidents.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.3.67 - 10004541 (June 9, 2026)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the error message displayed when an invalid or malformed authorization code is provided during Authorization Code flow configuration.

Related pull requests:
- 44467

Download

1.3.66 - 7827247 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43566

Download

1.3.65 - 6267616 (December 14, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the fetch-incidents command created duplicate incidents.

Related pull requests:
- 42188

Download

1.3.64 - 5949376 (November 20, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where authorisation code authentication caused the test button to fail.
Updated the Docker image to: demisto/auth-utils:1.0.0.5929598.

Related pull requests:
- 41947

Download

1.3.63 - 5665400 (October 31, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.

Related pull requests:
- 41222

Download

1.3.62 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.3.61 - R5469292 (October 20, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where fetch-incidents would start to create aggregated delays when fetch interval was set to more than 10 minutes.

Related pull requests:
- 41516

Download

1.3.60 - 4726203 (September 1, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Microsoft Management Activity API (O365 Azure Events) help section and documentation with details about the case sensitivity of the Operations to fetch parameter.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Related pull requests:
- 41070

Download

1.3.59 - 4512458 (August 13, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.3.58 - 4431069 (August 5, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.3.57 - 4419577 (August 4, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.3.56 - R3980324 (June 26, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.3562326.

Related pull requests:
- 40309

Download

1.3.55 - 3481649 (May 21, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.3.54 - R3318350 (May 6, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the documentation and metadata.
Updated the Docker image to: demisto/auth-utils:1.0.0.3030454.

Related pull requests:
- 38913
- 39393
- 39363
- 39365
- 39366
- 39367
- 39368

Download

1.3.53 - R3247809 (April 27, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Metadata and documentation improvements.

Related pull requests:
- 39133

Download

1.3.52 - R2989425 (March 26, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.

Related pull requests:
- 38100

Download

1.3.51 - R1741355 (December 3, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in MicrosoftApiModule where the GCC High Defender endpoint was incorrect.

Related pull requests:
- 37253

Download

1.3.50 - 1666862 (November 18, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.116752.

Related pull requests:
- 37228
- 37223

Download

1.3.49 - 1615839 (November 10, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.115527.

Related pull requests:
- 37120
- 37113

Download

1.3.48 - 1480610 (October 8, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added infrastructure support for Microsoft Graph Application endpoints.

Related pull requests:
- 36407

Download

1.3.47 - 1431233 (September 25, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Reverted the fix for the Test button in the Cortex XSOAR application, as it cannot be supported in the current workflow without causing errors or unintended issues.

Related pull requests:
- 36446

Download

1.3.46 - 1400145 (September 18, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the ms-management-activity-auth-reset command is not implemented properly in the integration settings.

Related pull requests:
- 36379

Download

1.3.45 - 1375138 (September 12, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the test button did not work with the Cortex XSOAR application.
Updated the Docker image to: demisto/auth-utils:1.0.0.110710.

Related pull requests:
- 36198

Download

1.3.44 - 1244506 (August 5, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the MicrosoftApiModule with exchange_online endpoints.

Related pull requests:
- 34917
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34975
- 34999
- 34913
- 35000
- 34990
- 35002
- 34932
- 34862
- 35005
- 34868
- 34977
- 35009
- 34969
- 34591
- 34693
- 34657
- 34671
- 34681
- 34676
- 34672
- 34372
- 34701
- 34660
- 34684
- 34700
- 34702
- 34696
- 34117
- 34704
- 34706
- 34692
- 33735
- 34714
- 34703
- 34353
- 34725
- 34694
- 34734
- 34640
- 34724
- 34652
- 34443
- 34730
- 34653
- 34732
- 34667
- 34709
- 34755
- 34759
- 32423
- 34598
- 34758
- 34745
- 34762
- 34327
- 34742
- 34474
- 34766
- 34774
- 34782
- 34763
- 34756
- 34747
- 34645
- 34532
- 34675
- 34777
- 34788
- 34804
- 34729
- 34796
- 34691
- 34784
- 34783
- 34765
- 34485
- 34768
- 34593
- 34813
- 34818
- 34832
- 34772
- 34830
- 34833
- 34829
- 34834
- 34839
- 34828
- 34388
- 34838
- 34761
- 34858
- 34861
- 34764
- 34738
- 34538
- 34831
- 34748
- 34846
- 34845
- 34864
- 34817
- 34686
- 34865
- 34867
- 34863
- 34880
- 34876
- 34386
- 34881
- 34884
- 34799
- 34827
- 34883
- 34886
- 34512
- 34887
- 34889
- 34877
- 34904
- 34905
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34608
- 35026
- 35029
- 35015
- 35023
- 34776
- 34654
- 34978
- 34986
- 34938
- 34506
- 35011
- 35014
- 34779
- 35019
- 35039
- 34897
- 35049
- 35016
- 35046
- 35051
- 35040
- 34614
- 32477

Download

1.3.43 - 1066075 (June 3, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in where the GCC endpoints were incorrect in the supported integrations.

Related pull requests:
- 34634

Download

1.3.42 - 1051712 (May 28, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for Microsoft Defender 365 Endpoint in the Microsoft API Module.
Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.
Updated the Docker image to: demisto/auth-utils:1.0.0.96154.

Related pull requests:
- 34495

Download

1.3.41 - 1021616 (May 16, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in MicrosoftApiModule where the GCC endpoints were incorrect.

Related pull requests:
- 34360

Download

1.3.40 - 919924 (March 28, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added a timeout value to the retry on rate limit mechanism.

Related pull requests:
- 33566

Download

1.3.39 - 860237 (February 29, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for the OAuth consent dialog after the user signs in using the ms-management-activity-generate-login-url command.

Related pull requests:
- 31942

Download

1.3.38 - 823153 (February 12, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.87472.

Related pull requests:
- 32847

Download

1.3.37 - 798475 (February 1, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.86556.

Related pull requests:
- 32527

Download

1.3.36 - 760302 (January 14, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.84760.

Related pull requests:
- 32160

Download

1.3.35 - 722180 (December 28, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.83934.

Related pull requests:
- 31831

Download

1.3.34 - 7161298 (December 14, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.83550.

Related pull requests:
- 31472

Download

1.3.33 - 7029664 (November 30, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.81563.

Related pull requests:
- 31207

Download

1.3.32 - 6636841 (October 18, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.77807.

Related pull requests:
- 30241

Download

1.3.31 - R6592021 (October 13, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.76157.

Related pull requests:
- 29574

Download

1.3.30 - 6363299 (September 19, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.74100.

Related pull requests:
- 29735

Download

1.3.29 - 6226805 (September 3, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added a moderate retry mechanism for the authorization HTTP request through oproxy.

Related pull requests:
- 29015

Download

1.3.28 - 6170593 (August 28, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added an infrastructure support for Microsoft Graph Application Endpoints.

Related pull requests:
- 28801

Download

1.3.27 - 6133197 (August 23, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where instances using version 1.3.26 of the pack could have authentication issues.

Related pull requests:
- 29173

Download

1.3.26 - 6106826 (August 21, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where changes made to the Authorization code parameter were not being reflected in the integration code, resulting in the continued use of the first parameter.

Related pull requests:
- 29035
- 29173

Download

1.3.25 - 6010750 (August 10, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for Microsoft Defender for Application Endpoints in the Microsoft API Module.

Related pull requests:
- 27705

Download

1.3.24 - 5950262 (August 3, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the start time for fetching incidents from the last retrieval was not parsed correctly.
Updated the Docker image to: demisto/pyjwt3:1.0.0.67573.

Related pull requests:
- 28713

Download

1.3.23 - 5910354 (July 30, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the ms-management-activity-auth-reset command which allows the user to restart the authentication process by resetting the integration context if necessary.
Maintenance and stability enhancements.

Related pull requests:
- 26482

Download

1.3.22 - 5883145 (July 27, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.66845.

Related pull requests:
- 28547

Download

1.3.21 - R5866730 (July 25, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.65022.

Related pull requests:
- 28091

Download

1.3.20 - R5692327 (July 5, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the following integration parameters to support credentials fetching object:
- Application ID or Client ID.
- Key or Client Secret.
- Certificate Thumbprint.
- Token or Tenant ID.
- The authentication code.

Related pull requests:
- 27684

Download

1.3.19 - 5558549 (June 18, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.63826.

Related pull requests:
- 27502

Download

1.3.18 - 5410099 (May 31, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.61733.

Related pull requests:
- 27077

Download

1.3.17 - 5277943 (May 16, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.58911.

Related pull requests:
- 26536

Download

1.3.16 - R5170573 (May 2, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.56580.

Related pull requests:
- 26185

Download

1.3.15 - 5057113 (April 17, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.55049.

Related pull requests:
- 25887

Download

1.3.14 - 4954430 (April 2, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.52548.
Added support for old docker images which do not have the defusedxml package.

Related pull requests:
- 25670

Download

1.3.12 - 4835020 (March 17, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.49643.

Related pull requests:
- 25351

Download

1.3.11 - 4718798 (March 1, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.49434.

Related pull requests:
- 24961

Download

1.3.10 - R4646022 (February 19, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the integration uses the Token (refresh_token) integration parameter only for the first run of the integration and ignores it in subsequent runs.
Improved implementation of the authorization process with the Oproxy server.
Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.
Fixed an issue where linter failed due to pylint errors.
Added the ms-management-activity-generate-login-url command to easily get the auth code.
Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.

Related pull requests:
- 24261

Download

1.3.7 - 4560457 (February 7, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for authentication using Azure Managed Identities.
Updated the Docker image to: demisto/pyjwt3:1.0.0.47268.

Related pull requests:
- 23951

Download

1.3.6 - 4247670 (December 19, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where in some rare cases, commands would fail with a 'NoneType' object is not subscriptable message.

Related pull requests:
- 23140

Download

1.3.5 - 4112675 (November 28, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where error was raised due to api metrics creation attempt from a script execution.

Related pull requests:
- 22476

Download

1.3.4 - 4092720 (November 23, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.
Updated the Docker image to: demisto/pyjwt3:1.0.0.36533.

Related pull requests:
- 20831

Download

1.3.3 - 4034921 (November 14, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 22074

Download

1.3.2 - 4013107 (November 10, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Internal code improvements.

Related pull requests:
- 22120

Download

1.3.1 - R3994332 (November 8, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Internal code improvements.

Related pull requests:
- 21879

Download

1.3.0 - 3769974 (October 2, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 21461

Download

1.2.4 - 2624637 (March 22, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the following parameters for Certificate Authentication support for self-deployed mode.
- Certificate Thumbprint - Used for certificate authentication. As appears in the "Certificates & secrets" page of the app.
- Private Key - The private key of the registered certicate.
Updated the Docker image to: demisto/pyjwt3:1.0.0.27257.

Download

1.3.67 - 10004541 (June 9, 2026)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the error message displayed when an invalid or malformed authorization code is provided during Authorization Code flow configuration.

Related pull requests:
- 44467

Download

1.3.66 - 7827247 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43566

Download

1.3.65 - 6267616 (December 14, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the fetch-incidents command created duplicate incidents.

Related pull requests:
- 42188

Download

1.3.64 - 5949376 (November 20, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where authorisation code authentication caused the test button to fail.
Updated the Docker image to: demisto/auth-utils:1.0.0.5929598.

Related pull requests:
- 41947

Download

1.3.63 - 5665400 (October 31, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.

Related pull requests:
- 41222

Download

1.3.62 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.3.61 - R5469292 (October 20, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where fetch-incidents would start to create aggregated delays when fetch interval was set to more than 10 minutes.

Related pull requests:
- 41516

Download

1.3.60 - 4726203 (September 1, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Microsoft Management Activity API (O365 Azure Events) help section and documentation with details about the case sensitivity of the Operations to fetch parameter.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Related pull requests:
- 41070

Download

1.3.59 - 4524270 (August 14, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.3.58 - 4431069 (August 5, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.3.57 - 4419577 (August 4, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.3.56 - R3980324 (June 26, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.3562326.

Related pull requests:
- 40309

Download

1.3.55 - 3481649 (May 21, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.3.54 - R3324525 (May 6, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the documentation and metadata.
Updated the Docker image to: demisto/auth-utils:1.0.0.3030454.

Related pull requests:
- 38913
- 39393
- 39363
- 39365
- 39366
- 39367
- 39368

Download

1.3.53 - R3247809 (April 27, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Metadata and documentation improvements.

Related pull requests:
- 39133

Download

1.3.52 - R2989425 (March 26, 2025)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.

Related pull requests:
- 38100

Download

1.3.51 - R1741355 (December 3, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in MicrosoftApiModule where the GCC High Defender endpoint was incorrect.

Related pull requests:
- 37253

Download

1.3.50 - 1666862 (November 18, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.116752.

Related pull requests:
- 37228
- 37223

Download

1.3.49 - 1615839 (November 10, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.115527.

Related pull requests:
- 37120
- 37113

Download

1.3.48 - 1480610 (October 8, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added infrastructure support for Microsoft Graph Application endpoints.

Related pull requests:
- 36407

Download

1.3.47 - 1429144 (September 24, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Reverted the fix for the Test button in the Cortex XSOAR application, as it cannot be supported in the current workflow without causing errors or unintended issues.

Related pull requests:
- 36446

Download

1.3.46 - 1400145 (September 18, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the ms-management-activity-auth-reset command is not implemented properly in the integration settings.

Related pull requests:
- 36379

Download

1.3.45 - 1375138 (September 12, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the test button did not work with the Cortex XSOAR application.
Updated the Docker image to: demisto/auth-utils:1.0.0.110710.

Related pull requests:
- 36198

Download

1.3.44 - 1244506 (August 5, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the MicrosoftApiModule with exchange_online endpoints.

Related pull requests:
- 34917
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34975
- 34999
- 34913
- 35000
- 34990
- 35002
- 34932
- 34862
- 35005
- 34868
- 34977
- 35009
- 34969
- 34591
- 34693
- 34657
- 34671
- 34681
- 34676
- 34672
- 34372
- 34701
- 34660
- 34684
- 34700
- 34702
- 34696
- 34117
- 34704
- 34706
- 34692
- 33735
- 34714
- 34703
- 34353
- 34725
- 34694
- 34734
- 34640
- 34724
- 34652
- 34443
- 34730
- 34653
- 34732
- 34667
- 34709
- 34755
- 34759
- 32423
- 34598
- 34758
- 34745
- 34762
- 34327
- 34742
- 34474
- 34766
- 34774
- 34782
- 34763
- 34756
- 34747
- 34645
- 34532
- 34675
- 34777
- 34788
- 34804
- 34729
- 34796
- 34691
- 34784
- 34783
- 34765
- 34485
- 34768
- 34593
- 34813
- 34818
- 34832
- 34772
- 34830
- 34833
- 34829
- 34834
- 34839
- 34828
- 34388
- 34838
- 34761
- 34858
- 34861
- 34764
- 34738
- 34538
- 34831
- 34748
- 34846
- 34845
- 34864
- 34817
- 34686
- 34865
- 34867
- 34863
- 34880
- 34876
- 34386
- 34881
- 34884
- 34799
- 34827
- 34883
- 34886
- 34512
- 34887
- 34889
- 34877
- 34904
- 34905
- 34909
- 34903
- 34906
- 34147
- 34217
- 34908
- 34619
- 34911
- 34823
- 34837
- 34918
- 34816
- 34630
- 34871
- 34767
- 34879
- 34912
- 34840
- 34931
- 34892
- 34920
- 34926
- 34814
- 34811
- 34964
- 34967
- 34979
- 34921
- 34990
- 34896
- 34966
- 34985
- 34983
- 34255
- 34608
- 35026
- 35029
- 35015
- 35023
- 34776
- 34654
- 34978
- 34986
- 34938
- 34506
- 35011
- 35014
- 34779
- 35019
- 35039
- 34897
- 35049
- 35016
- 35046
- 35051
- 35040
- 34614
- 32477

Download

1.3.43 - 1066075 (June 3, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in where the GCC endpoints were incorrect in the supported integrations.

Related pull requests:
- 34634

Download

1.3.42 - 1051712 (May 28, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for Microsoft Defender 365 Endpoint in the Microsoft API Module.
Updated the MicrosoftApiModule to better handle the Authorization Code flow in the supported integrations.
Updated the Docker image to: demisto/auth-utils:1.0.0.96154.

Related pull requests:
- 34495

Download

1.3.41 - 1021616 (May 16, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue in MicrosoftApiModule where the GCC endpoints were incorrect.

Related pull requests:
- 34360

Download

1.3.40 - 919924 (March 28, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added a timeout value to the retry on rate limit mechanism.

Related pull requests:
- 33566

Download

1.3.39 - 860237 (February 29, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for the OAuth consent dialog after the user signs in using the ms-management-activity-generate-login-url command.

Related pull requests:
- 31942

Download

1.3.38 - 821588 (February 12, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.87472.

Related pull requests:
- 32847

Download

1.3.37 - 795978 (January 31, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.86556.

Related pull requests:
- 32527

Download

1.3.36 - 760302 (January 14, 2024)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.84760.

Related pull requests:
- 32160

Download

1.3.35 - 722180 (December 28, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.83934.

Related pull requests:
- 31831

Download

1.3.34 - 7161298 (December 14, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.83550.

Related pull requests:
- 31472

Download

1.3.33 - 7029664 (November 30, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.81563.

Related pull requests:
- 31207

Download

1.3.32 - 6636841 (October 18, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.77807.

Related pull requests:
- 30241

Download

1.3.31 - R6592021 (October 13, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/auth-utils:1.0.0.76157.

Related pull requests:
- 29574

Download

1.3.30 - 6363299 (September 19, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.74100.

Related pull requests:
- 29735

Download

1.3.29 - 6226805 (September 3, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added a moderate retry mechanism for the authorization HTTP request through oproxy.

Related pull requests:
- 29015

Download

1.3.28 - 6170593 (August 28, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added an infrastructure support for Microsoft Graph Application Endpoints.

Related pull requests:
- 28801

Download

1.3.27 - 6133197 (August 23, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where instances using version 1.3.26 of the pack could have authentication issues.

Related pull requests:
- 29173

Download

1.3.26 - 6106826 (August 21, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where changes made to the Authorization code parameter were not being reflected in the integration code, resulting in the continued use of the first parameter.

Related pull requests:
- 29035
- 29173

Download

1.3.25 - 6010750 (August 10, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for Microsoft Defender for Application Endpoints in the Microsoft API Module.

Related pull requests:
- 27705

Download

1.3.24 - 5950262 (August 3, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the start time for fetching incidents from the last retrieval was not parsed correctly.
Updated the Docker image to: demisto/pyjwt3:1.0.0.67573.

Related pull requests:
- 28713

Download

1.3.23 - 5910354 (July 30, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the ms-management-activity-auth-reset command which allows the user to restart the authentication process by resetting the integration context if necessary.
Maintenance and stability enhancements.

Related pull requests:
- 26482

Download

1.3.22 - 5887180 (July 27, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.66845.

Related pull requests:
- 28547

Download

1.3.21 - R5866730 (July 25, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.65022.

Related pull requests:
- 28091

Download

1.3.20 - 5618116 (June 26, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the following integration parameters to support credentials fetching object:
- Application ID or Client ID.
- Key or Client Secret.
- Certificate Thumbprint.
- Token or Tenant ID.
- The authentication code.

Related pull requests:
- 27684

Download

1.3.19 - 5558549 (June 18, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.63826.

Related pull requests:
- 27502

Download

1.3.18 - 5410099 (May 31, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.61733.

Related pull requests:
- 27077

Download

1.3.17 - 5277943 (May 16, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.58911.

Related pull requests:
- 26536

Download

1.3.16 - R5170573 (May 2, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.56580.

Related pull requests:
- 26185

Download

1.3.15 - 5057113 (April 17, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.55049.

Related pull requests:
- 25887

Download

1.3.14 - 4954430 (April 2, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.52548.
Added support for old docker images which do not have the defusedxml package.

Related pull requests:
- 25670

Download

1.3.12 - 4835020 (March 17, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.49643.

Related pull requests:
- 25351

Download

1.3.11 - 4718798 (March 1, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Updated the Docker image to: demisto/pyjwt3:1.0.0.49434.

Related pull requests:
- 24961

Download

1.3.10 - R4710726 (February 28, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where the integration uses the Token (refresh_token) integration parameter only for the first run of the integration and ignores it in subsequent runs.
Improved implementation of the authorization process with the Oproxy server.
Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.
Fixed an issue where linter failed due to pylint errors.
Added the ms-management-activity-generate-login-url command to easily get the auth code.
Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.

Related pull requests:
- 24261

Download

1.3.7 - 4560457 (February 7, 2023)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added support for authentication using Azure Managed Identities.
Updated the Docker image to: demisto/pyjwt3:1.0.0.47268.

Related pull requests:
- 23951

Download

1.3.6 - 4246715 (December 19, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where in some rare cases, commands would fail with a 'NoneType' object is not subscriptable message.

Related pull requests:
- 23140

Download

1.3.5 - 4112675 (November 28, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Fixed an issue where error was raised due to api metrics creation attempt from a script execution.

Related pull requests:
- 22476

Download

1.3.4 - 4092720 (November 23, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Documentation and metadata improvements.
Updated the Docker image to: demisto/pyjwt3:1.0.0.36533.

Related pull requests:
- 20831

Download

1.3.3 - 4034921 (November 14, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added sections to instance configuration.

Related pull requests:
- 22074

Download

1.3.2 - 4013107 (November 10, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Internal code improvements.

Related pull requests:
- 22120

Download

1.3.1 - R3994332 (November 8, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Internal code improvements.

Related pull requests:
- 21879

Download

1.3.0 - 3818865 (October 11, 2022)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 21461

Download

1.2.4 - 2624637 (March 22, 2022)

Integrations

Microsoft Management Activity API (O365 Azure Events)

Added the following parameters for Certificate Authentication support for self-deployed mode.
- Certificate Thumbprint - Used for certificate authentication. As appears in the "Certificates & secrets" page of the app.
- Private Key - The private key of the registered certicate.
Updated the Docker image to: demisto/pyjwt3:1.0.0.27257.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	September 9, 2020
Last Release	June 9, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

Microsoft Management Activity API (O365 Azure Events)

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.