FunzionalitàLogPulse SIEM: real-time detections, MITRE ATT&CK coverage, risk-based alerting, and a Notables triage workflow
FunzionalitàThreat intelligence: IOC store, manual watchlists, Spamhaus ASN-DROP feeds, and a threat landscape with geo map and IOC enrichment of risk events
FunzionalitàUEBA behavior baselines with impossible-travel, first-seen, and volume-spike detection
FunzionalitàSOAR response actions gated behind propose-and-approve, so the AI proposes and a human approves before anything runs
FunzionalitàSigma rule import: transpile and bulk-import SigmaHQ rules to LPQL, with ~3,000 rules bundled as managed content packs
FunzionalitàService Intelligence: entity discovery, service mapping, KPIs, anomaly detection, and blast-radius analysis
FunzionalitàOAuth-secured MCP server: connect Claude and other AI agents to your read tools, plus propose-and-approve write tools for detections, alerts, KPIs, and pipelines
FunzionalitàCloud connectors for Entra ID, Microsoft 365, and AWS CloudTrail, with canonical cloud-audit normalization
FunzionalitàAI-driven notable investigations with auto-close, re-investigate, and server-side log-pattern compression
FunzionalitàFull invoicing system: VAT invoices with PDF, VIES validation, and AI credit top-ups
FunzionalitàAmazon Bedrock as an AI provider for EU/GDPR (AVG) data residency
MiglioramentoConsolidated Security and Observability hubs with tabbed navigation
CorrezioneGeoIP enrichment now loads reliably at worker startup via the ClickHouse dictionary
v0.11.0May 2026Unified Workspace & Agent Fleet
FunzionalitàUnified Workspace bringing AI investigation and LPQL search together under /workspace with split and inline canvas layouts
FunzionalitàSource-and-time scope picker to target investigations across logs, dashboards, pipelines, alerts, and lookups
FunzionalitàQuick Ask overlay: ask Byte from anywhere via the header button or Ctrl+I, replacing the old slide-out
FunzionalitàAgent Fleet management: bulk upgrades, one-click remote actions, and Vector run-state with last-heartbeat visibility
FunzionalitàManaged Proxmox VE pipeline template with a guided setup wizard
FunzionalitàOnboarding tour and getting-started checklist on the home page
FunzionalitàNew input types including auditd and Proxmox syslog, plus built-in parser templates on the Fleet page
FunzionalitàWorkspace Activity feed merging searches and sessions, plus a Saved + Recent LPQL library
MiglioramentoReal-time toast notifications over a shared SSE stream, with reconnect that keeps investigations live across page navigation
MiglioramentoBrotli/gzip response compression and AI prompt caching for faster, cheaper queries
CorrezioneQueries are now killed on client disconnect, freeing ClickHouse resources mid-stream
v0.10.0April 2026AI Investigator, v2
FunzionalitàByte: rebranded AI assistant (formerly Copilot) integrated in dashboard and header
FunzionalitàWorkspace knowledge tools: investigator now draws on saved data models, services, and parser rules
FunzionalitàProactive get_system_health_snapshot tool for single-pass health checks
FunzionalitàScope checks and honest insight-mode reporting in AI investigations
Funzionalitàupdate_panel / remove_panel events on the investigation canvas
Miglioramentoisolated-vm sandboxing for safer pipeline execution
MiglioramentoPulse animation on PulseCanvas for live log visualisation
MiglioramentoLogTable events mode with richer parsed-field and attribute rendering
MiglioramentoStats queries and visualizations overhaul for faster dashboards
CorrezioneIPv4-mapped IPv6 handling in BLOCKED_IP_RANGES
v0.9.0March 2026Visual Pipelines & Kubernetes
FunzionalitàVisual Pipeline editor with drag-and-drop node library
FunzionalitàKubernetes integration via Helm chart
MiglioramentoLPQL syntax highlighting in docs
FunzionalitàVector agent support
v0.8.0February 2026
FunzionalitàAI Anomaly Detection with Modified Z-Score algorithm
Utilizziamo i cookie per analizzare il traffico del sito e migliorare la tua esperienza. Nessun cookie viene installato senza il tuo consenso. Informativa sulla privacy