Analytics Content Version: 2025.07.23 - Content Update Release Notes - Cortex

Release date: 20 August, 2025

Change type	Changes
Added a new Informational Analytics BIOC	Unrecognized internal address (AAD mismatch)
Improved logic of a High Analytics BIOC	Collection error
Improved logic of 2 Low Analytics Alerts	Logs were not collected from a data source for an abnormally long time Risk indicators detected in email
Improved logic of 5 Informational Analytics BIOCs	A cloud identity invoked IAM related persistence operations An identity attached an administrative policy to an IAM user or role IAM User added to an IAM group IAM role trust policy modification IAM role was created
Decreased the severity to Informational for an Analytics BIOC	MSI accessed a web page running a server-side script
Changed metadata of an Informational Analytics BIOC	Email suspicious Moniker link detected
Changed metadata of an Informational Analytics Alert	Storage enumeration activity