August 2023 Release Details
The 2023.08 release of Open Collector requires Knowledge Base version 7.1.671.0 (or above).
AWS S3 Beat
Azure Event Hubs Beat
Carbon Black Cloud Beat
Cisco AMP Beat
Duo Authentication Security Beat
Gmail Message Tracking Beat
Microsoft Graph API Beat
Prisma Cloud Beat
Qualys FIM Beat
Sophos Central Beat
Symantec WSS Beat
Feature or Beat
Relevant Documentation Updates
A new Beat has been added: the Salesforce Beat, allowing for the collection of Salesforce Audit logs within the Open Collector.
Found in Version
New deployments added to the OC Admin Pipeline Properties window no longer disappear when the page is refreshed.
Using OC Admin to generate pipeline augmentations no longer results in parsing errors.
Previously deployed pipelines will need to be re-deployed with the new version of OC Admin for this fix to take effect.
Beats: G Suite
Issue: The GSuite Beat OAuth URL fails when the browser attempts to resolve to localhost.
Expected Results: The OAuth URL should be formatted correctly and grants access.
Workaround: When the localhost timeout page is reached, the Auth Code can be pulled from the URL. The code is in between "token&=" and "&scope". Copy the data in between those entries in the URL and paste it at the Auth Code prompt, at which point collection will commence.