Detection Engine Updates Version 2.138
Release Date: May 20, 2025
In this release, we've focused on improving detection capabilities for Azure services, given their importance in cloud infrastructure. By introducing new detectors for Azure Entra ID tokens, Communication Services, and App Configuration connection strings, we aim to strengthen the protection of sensitive Azure credentials. These enhancements are essential for maintaining robust security, enabling organizations to use Azure's features safely.
New Detectors
- Azure Entra ID Tokens – Detects tokens used for authentication within Azure's identity management service, Entra ID.
- Azure Communication Services Connection Strings – Identifies connection strings for Azure's comprehensive communication platform.
- Azure DevOps Personal Access Token – Recognizes personal access tokens used to authenticate with Azure DevOps.
- Laravel Encryption Key – Detects encryption keys used in Laravel applications for data security.
- Azure App Configuration Connection String – Identifies connection strings for managing application settings in Azure.
- X AI API Keys – Detects API keys for accessing X AI's artificial intelligence services.
Detector Improvements
- Microsoft Azure Storage Connection String – Detector Upgrade: Improved regex precision for more accurate detection.
- ODBC Connection String – Detector Upgrade: Enhanced regex precision to better identify ODBC connection strings.
- Jira Token – Detector Upgrade: Corrected host regex to accurately match ports.
- SMB Credentials – Detector Upgrade: Now allows percent sign as a separator between username and password in host matches.
- Octopus API Key – Checker Upgrade: Updated to use the correct API endpoint, resolving issues with secret validity checks.
