Skip to main content

Responses are generated using AI and may contain mistakes.

New-Scale Security Operations PlatformNew-Scale Content Package Release Notes

Content Package 2026.6.6

These release notes contain information about content package 2026.6.6, released on 25 Jun 2026.

Enhancements

  • Updated parser conditions and regex extractions for dest_domain, domain, dest_login_id, login_id, dest_user_sid, user_sid, auth_process, auth_package, src_host_windows, src_host, subject_sid and src_user in parser - microsoft-evsecurity-kv-endpoint-success-4624-1.

  • Restored the following enrichers that were previously deprecated as part of the April content update. To resolve and normalize the user and dest_user fields from email addresses, UPNs, SIDs, UIDs, and employee numbers.

Enrichers Restored

DisplayName

Name

UID to User Lookup

all-user_id-user

EmployeeNumber to User Lookup

all-employee_id-user

Email to User Enricher-1

all-user-1

Destination Email to Destination User Enricher-1

all-dest_user-1

Email to User Enricher-2

all-email_address-user-2

Destination Email to Destination User Enricher-2

all-dest_email_address-dest_user-2

User SID to User Lookup

all-user

Microsoft User UPN to User/Email Enricher

microsoft-email_address-user

Null Direction Network Traffic

all-direction-3

Enrichers Removed

These were the alternatives available prior to the restored enrichers above.

DisplayName

Name

User to Email Address

all-email_address-user

Destination User to Destination Email Address

all-dest_email_address-dest_user

User to User SID or User ID

all-user_sid-user_id-user

Destination User to Destination User SID or Destination User ID

all-dest_user_sid-dest_user_id-dest_user

Microsoft User UPN to Email Address Enricher

microsoft-email_address-user_upn

Customers may observe improved population of user and dest_user fields on events where these were previously missing or unresolved after the April release. Correlation rules and analytics that depend on these fields may resume firing with broader coverage.