[oferInbar]

Required items, please complete

Change(s):

• Add first-class Defender Workbook migration, dependency planning/review (workbook-dependency-plan, workbook-review), and V3.1 packaging (common/defenderWorkbooks.ps1) with canonical parser dependsOn references ([variables('parserObject<N>')._parserId<N>]).
• Enforce solution release floor 3.2.0 <= version < 4.0.0 for current Authoring target/release selection and V3.1 packaging while preserving Custom Detection release bounds [3.1.0, 4.0.0) and solution release version inheritance.
• Default hourly Sentinel rules (PT1H frequency and PT1H lookback) to the native 4-hour XDR lookback (PT4H) with eventTimeWindow provenance, map eligible single-table kind: NRT rules to schedule.frequency: "NRT", and accept standard _-prefixed built-in ASIM parsers (_ASim_* and _Im_*) in both Custom Detections and Defender Workbooks.
• Add .script/local-validation/validate-xdr-content.py and integrate xdr-detection and xdr-workbook validators into .script/local-validation/validate.ts and build-and-validate.ps1 with explicit SKIP visibility.
• Add consolidated batch review helpers (review-packet, consolidated-review-plan), focused next-blocker guidance (nextStepRecommendation, nextBlockerReview), predictable DD-MM-YYYY release-note dates (release_notes.py), default lab-deployment ARM validation preflight (X Sentinel rules, Y workbooks, and Z custom detections), qualification/export readiness audits, status reminders (workflow-status-reminder), single-owner execution leases (workflow-execution-owner), and explicit approval forwarding (workflow-forward-approval).

Reason for Change(s):

• Enable end-to-end Sentinel-to-Defender-XDR solution authoring, workbook migration, dependency provenance, consolidated batch review, and V3.1 hybrid solution packaging on Solution-toolkit-master without modifying solution content files on the toolkit branch.

Version Updated:

• N/A (toolkit and local-validation infrastructure only; zero Solutions/ content files modified on this branch)

Testing Completed:

• Yes
• Full Python test suite:
  PYTHONPATH=Tools/SentinelToXDRMigration:Tools/SentinelToXDRMigration/tests /opt/anaconda3/bin/python3.12 -m pytest -q Tools/SentinelToXDRMigration/tests
  Result: passed (1471 passed, 9 skipped, 2 warnings in 485.37s)
• PowerShell V3.1 Defender Workbook packaging & parser dependency tests:
  pwsh -NoProfile -Command "Invoke-Pester -Path 'Tools/SentinelToXDRMigration/tests/defenderWorkbooks.Tests.ps1'"
  Result: passed (25 passed, 0 failed)
• Security review (security-review agent across 8d08428cab0f981a65804ff42cb7ec61c5e04a26..1e883a9b54c31244d0e17466da2383bb9dfcbc49):
  Result: passed (0 vulnerabilities found)

Checked that the validations are passing and have addressed any issues that are present:

• Yes