Enhanced BloodHound workbooks by adding time context with a duration.

[omkarj-metron]

Change(s):

• Added 30-day timeContext to parameter queries in all six BloodHound Enterprise Workbooks to fix query failures caused by default time-range values.

Reason for Change(s):

• Workbook parameters failed without an explicit time window; 30-day context ensures dropdowns populate from recent data.
• Connector, branding, and packaging updates for BloodHound Enterprise solution v3.2.2.

Version Updated:

• No analytic rule templates changed.
• Solution package version: 3.2.2.

Testing Completed:

• Yes, validated workbooks in Sentinel; parameter dropdowns and queries run as expected.

Checked that the validations are passing and have addressed any issues that are present:

• Yes, local KQL/YAML validation checks passed.

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the BloodHound Enterprise solution workbooks to ensure parameter dropdowns reliably populate by adding an explicit time window, plus updates release notes to reflect the workbook changes.

Changes:

• Added explicit timeContext (30 days) to parameter queries across BloodHound Enterprise workbooks.
• Standardized parameter defaults (defaultValue) to avoid failures when no time range is selected.
• Updated ReleaseNotes.md for v3.2.2 with the workbook time-context change entry.

Reviewed changes

Copilot reviewed 7 out of 9 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
Solutions/BloodHound Enterprise/Workbooks/BloodHoundPostureHistory.json	Adds time context for parameter queries; also introduces fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/Workbooks/BloodHoundFindingTrends.json	Adjusts parameter time contexts/defaults; adds fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/Workbooks/BloodHoundEnterpriseTierZeroSearch.json	Adjusts parameter time contexts/defaults; adds fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/Workbooks/BloodHoundEnterpriseAuditLogs.json	Adjusts parameter time contexts/defaults; changes grid sorting behavior; adds fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/Workbooks/BloodHoundEnterpriseAttackPathOverview.json	Adjusts parameter time contexts/defaults; adds fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/Workbooks/BloodHoundEnterpriseAttackPathDetails.json	Adjusts parameter time contexts/defaults; adds fallbackResourceIds with a concrete workspace ID.
Solutions/BloodHound Enterprise/ReleaseNotes.md	Updates v3.2.2 entry date and includes workbook timeContext enhancement note.

[omkarj-metron]

Hi @v-atulyadav,
Thank you for promptly looking into our newly created pr.
I have resolved all the issues raised by copilot, plz let me know if there is anything else, I need to update in my code, to get it merged.

[omkarj-metron]

Hi @v-atulyadav,
Just a gentle reminder that the Copilot fixes are pushed and ready for your review whenever you get a chance.
Thank you.

[omkarj-metron]

Hi @v-atulyadav,
Just following up to see if you've had a chance to look this over.