> ## Documentation Index > Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt > Use this file to discover all available pages before exploring further. # BlueApp Release Notes ## July 2, 2026 **New Integrations or Capabilities** * Added an Atlassian Jira BlueApp orchestration action to create a Jira issue or task from a USM Anywhere investigation **Integration Improvements** * Improved LevelBlue Vulnerability Scanner Powered by Tenable vulnerability scan exports by adding complete vulnerability descriptions, clearer remediation details, and more structured PDF and CSV output * Updated LevelBlue Vulnerability Scanner Powered by Tenable BlueApp documentation to reflect authenticated scans through TVS, remove jOVAL references, and document credential information, limitations, and API details * Added separate monitoring event interval dropdowns for each Microsoft Defender for Endpoint scheduler data source **Fixes** * Resolved an issue where the API Document link was missing for Audit Events in the LevelBlue Vulnerability Scanner Powered by Tenable BlueApp log collection section * Resolved an issue where Cato Networks SASE Audit Feed Logs and XDR Stories Logs failed to ingest when the Cato Networks API returned an invalid timeFrame validation error for collection windows shorter than one minute * Resolved an issue where Check Point Harmony Email and Collaboration response actions were unavailable when creating Response Action Rules ## June 4 2026 **New Integrations or Capabilities** * Added support for choosing the scan type and scanner when scheduling Tenable asset scans and Tenable asset group scans **Integration Improvements** * Added remediation information retrieval for Tenable vulnerability scans so remediation details were available in vulnerability details * Marked the CrowdStrike Collect Incident Events scheduler as deprecated after CrowdStrike retired the legacy incidents API endpoint * Updated SentinelOne BlueApp telemetry for orchestration action calls, successful calls, and failed calls * Updated BlueApp connector service components with vulnerability fixes across commercial and GovCloud regions **Fixes** * Resolved an issue where Active Directory forensic scans failed with “Error executing commands” when WinRM used HTTP instead of HTTPS * Resolved an issue where the Forensics & Response “Get System Info” action failed on Linux assets with “No queries present” * Resolved an issue where Forensics & Response scans failed on AWS Windows assets with “Error executing commands” * Resolved an issue where the Jira Audit Logs BlueApp failed validation with “No Accessible Resource Ids Found” when valid Atlassian OAuth 2.0 access was configured * Resolved an issue where Office 365 BlueApp ingestion missed Microsoft Azure AD and Microsoft Entra ID activity logs, including “Admin deleted security info” events * Resolved an issue where Qualys orchestration actions for “VM Single asset scan from alarm source IP” and “VM single asset scan from destination IP” worked from alarm details but failed from the alarm page * Resolved an issue where the SentinelOne SOC BlueApp failed SentinelOne alert ingestion with a NullPointerException during Alerts collection * Resolved an issue where Sophos Central BlueApp scheduled jobs did not respect a 5-minute schedule and instead ran at longer intervals ## May 7 2026 **New Integrations or Capabilities** * Added support for scheduled collection of SentinelOne Identity Alerts, Endpoint Detection Alerts, Cloud Security Alerts, STAR Alerts, and UAM flow Alerts through the SentinelOne GraphQL API in the SentinelOne Singularity Operations Center BlueApp * Renamed the SentinelOne Identity BlueApp to SentinelOne Singularity Operations Center BlueApp **Integration Improvements** * Added Tenable scan template support in the TVS BlueApp for Basic Network Scan, Advanced Network Scan, Credentialed Patch Audit, Cryptographic Inventory, and Internal PCI Network Scan * Updated the TVS BlueApp getAllTypesOfScan API response to prioritize the saved scan type * Added telemetry for the Microsoft Defender for Endpoint BlueApp, including configuration status checks, connectivity checks, error rate checks, scheduler counts, and orchestration counts * Removed the legacy LevelBlue Managed Vulnerability Platform BlueApp from the BlueApps portfolio while retaining DDI Frontline VM **Fixes** * Resolved an issue where Salesforce BlueApp events stopped ingesting when SalesforceEventsCollector and LoginHistoryEventsCollector scheduled jobs failed with “Unable to invoke action method” errors * Resolved an issue where the Salesforce BlueApp API configuration tab failed to load, preventing validation or modification of the Salesforce integration * Resolved an issue where the SentinelOne BlueApp Asset Discovery scheduled job returned endpoint counts that did not match the SentinelOne console ## April 9 2026 **New Integrations or Capabilities** * Added enhanced scanner onboarding for Tenable environments, including in-product setup guidance, linking key retrieval, and default scanner selection. * Added support for selecting sensors during scanner configuration and authenticated scan launches. **Integration Improvements** * Improved multi-scanner management for Tenable deployments by allowing shared policy configuration across connected scanners. * Improved scanner targeting and deployment workflows for distributed or multi-scanner environments. * Improved vulnerability findings presentation and export error messaging for easier administration and troubleshooting. * Modernized the Microsoft Office 365 BlueApp through API, dependency, and compatibility updates. **Fixes** * Resolved an issue where the vulnerability scanner was unavailable for Essentials licensed environments. * Resolved an issue where authenticated group scans failed when credentials were assigned at the group level. * Resolved an issue where configuration changes were not consistently applied across connected scanners. * Resolved an issue where some scan launches targeted the wrong scanner in multi-scanner environments. * Resolved an issue where excessive informational findings appeared in some scan results. ## March 11 2026 **New Integrations or Capabilities** * Released an updated Forensics and Response BlueApp to align with the LevelBlue Vulnerability Scanner powered by Tenable and support the decommissioning of the jOVAL engine **Integration Improvements** * Improved support for Azure integrations by upgrading dependencies to align with current Azure SDK and platform requirements * Enhanced Azure Diagnostics Extension analysis to better support ingestion scenarios and validate compatibility with available data sources * Improved Qualys integration by upgrading to a newer API version to support asset collection and maintain compatibility with Qualys platform changes * Improved ServiceNow integration user experience when working with configuration items to provide clearer interaction and usability * Enhanced Tenable Vulnerability Scanning integration to support different scanner deployment scenarios and configurations * Updated Forensics and Response BlueApp to support SUDO command execution over SSH as part of credential-based forensic actions **Fixes** * Resolved an issue in the Tenable Vulnerability Scanning integration where circular dependencies caused application failures during execution * Resolved an issue in the Tenable Vulnerability Scanning playbook action where asset scan status was not updating correctly * Resolved an issue in the Microsoft Defender for Endpoint integration where file quarantine actions failed due to legacy code behavior * Resolved an issue in the Microsoft Office 365 integration where authentication failed during token revocation scenarios * Resolved an issue in the Salesforce integration where login history data ingestion produced incorrect or inconsistent results * Resolved an issue in the Salesforce integration where configuration succeeded but resulted in incomplete or incorrect data collection * Resolved intermittent failures in playbook execution where actions returned unexpected errors during runtime * Resolved an issue where playbooks failed to execute when triggered under specific conditions **Changes** * Removed Jump Box functionality from the Forensics and Response BlueApp credential assignment workflow * Removed privilege escalation using SU and SUDO from the credential management feature in the Forensics and Response BlueApp * Replaced privilege escalation behavior by enabling SUDO command execution within forensic actions over SSH * Updated credential requirements for the Forensics and Response BlueApp to require SUDO access for configured users or the use of SUDO-enabled credentials for affected assets ## February 26 2026 **Integration Improvements** * Added support for variables in action fields within Automated Playbooks to improve configuration flexibility * Improved ServiceNow integration by updating comment field handling for clearer and more consistent action output * Improved LevelBlue Vulnerability Scanner powered by Tenable integration by applying default configuration behavior for scan execution **Fixes** * Resolved an issue where Microsoft Defender for Endpoint integration failed due to deprecated Active Directory API usage * Resolved an issue where LevelBlue Vulnerability Scanner powered by Tenable integration did not correctly apply scan configuration defaults ## February 11 2026 **New Integrations or Capabilities** * Added support for LevelBlue Vulnerability Scanner powered by Tenable in both Commercial and GovCloud environments **Integration Improvements** * Improved handling of scan result storage and configuration within the LevelBlue Vulnerability Scanner powered by Tenable integration * Improved validation and execution of credential testing jobs for the LevelBlue Vulnerability Scanner powered by Tenable integration * Improved Microsoft Defender for Endpoint integration to support enhanced data handling and processing * Improved ServiceNow integration response descriptions to ensure clearer and more consistent field mapping * Added support for variables in action fields within Automated Playbooks to improve configuration flexibility **Fixes** * Resolved an issue where the Salesforce integration build pipeline failed during processing * Resolved an issue where Microsoft Defender for Endpoint integration experienced failures due to data splitting behavior * Resolved an issue where Office 365 integration failed when executing revoke session actions * Resolved an issue where scan results were not saved correctly in configured folders for the LevelBlue Vulnerability Scanner powered by Tenable integration See Older Release Notes in [Success Center](https://success.levelblue.com/s/)