Merge branch 'release/3.7.5'

Author: nusantara-self

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [3.7.4](https://github.com/TheHive-Project/Cortex-Analyzers/tree/3.7.4) (2026-01-22)
+
+[Full Changelog](https://github.com/TheHive-Project/Cortex-Analyzers/compare/3.7.3...3.7.4)
+
+**Merged pull requests:**
+
+- Slack - Fix lookup performance issues [\#1415](https://github.com/TheHive-Project/Cortex-Analyzers/pull/1415) ([nusantara-self](https://github.com/nusantara-self))
+
 ## [3.7.3](https://github.com/TheHive-Project/Cortex-Analyzers/tree/3.7.3) (2026-01-21)
 
 [Full Changelog](https://github.com/TheHive-Project/Cortex-Analyzers/compare/3.7.2...3.7.3)

analyzers/CrowdstrikeFalcon/CrowdstrikeFalcon_ThreatIntel.py

@@ -33,10 +33,10 @@ def _build_filter(self, data_type, observable):
         if data_type == 'hash':
             hash_type = self._detect_hash_type(observable)
             if hash_type:
-                return f"type:'{hash_type}'+indicator:'{observable.upper()}'"
+                return f"type:'{hash_type}'+indicator:'{observable.lower()}'"
             else:
                 # Search across all hash types if we can't determine
-                return f"indicator:'{observable.upper()}'"
+                return f"indicator:'{observable.lower()}'"
         elif data_type == 'domain':
             return f"type:'domain'+indicator:'{observable}'"
         elif data_type == 'ip':