Microsoft Sentinel
Cloud and workloadsNormalization Parsers List
In brief
The documentation now lists the `_Im_AgentEvent_AnthropicClaudeCompliance` parser, its BlueVoyant Codeless Connector Framework source, and that it uses the pack parameter. The page date was also updated.
What Defender admins need to know
Administrators can use the listing to identify this parser and its source details when reviewing Agent Event normalization options.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Parsers that don't have a value under Uses pack parameter don't have the AdditionalFields column populated.
Agent Event parsers
| Source | Notes | Parser | Uses pack parameter |
|---|---|---|---|
| Anthropic Claude Compliance | Anthropic Claude Compliance events collected using the Codeless Connector Framework by BlueVoyant. | _Im_AgentEvent_AnthropicClaudeCompliance | true |
Alert Event parsers
| Source | Notes | Parser | Uses pack parameter |
@@ -26,7 +26,7 @@ description: This article lists Advanced Security Information Model (ASIM) parse ms.author: edbaynash author: EdB-MSFT ms.topic: reference-ms.date: 2024-12-31T00:00:00.0000000Z+ms.date: 2026-10-07T00:00:00.0000000Z locale: en-us document_id: 359873a1-56e3-33cb-bb05-d57cb8277b90 document_version_independent_id: 2f824408-b725-e53d-b632-5a3f4b09ca0b@@ -57,6 +57,12 @@ This document provides a list of Advanced Security Information Model (ASIM) pars
Parsers that don't have a value under `Uses pack parameter` don't have the `AdditionalFields` column populated.
+## Agent Event parsers
+
+| **Source** | **Notes** | **Parser** | **Uses pack parameter** |
+| --- | --- | --- | --- |
+| **Anthropic Claude Compliance** | Anthropic Claude Compliance events collected using the Codeless Connector Framework by BlueVoyant. | `_Im_AgentEvent_AnthropicClaudeCompliance` | `true` |
+
## Alert Event parsers
| **Source** | **Notes** | **Parser** | **Uses pack parameter** |