January 15

Highlights

• Added an upgrade status page to improve visibility during maintenance windows.

• Improved investigation quality for authorized scanning activity to reduce noise.

• Expanded integration capabilities for SentinelOne and Azure Log Analytics.

• Added beta support for Exabeam as a new data source.

New Features

Upgrade Status Page

• Added a dedicated status page to keep users informed during service upgrades and maintenance.

Integrations

Exabeam (Beta)

• Added beta support for Exabeam as a data source to begin configuring connectivity ahead of general availability.

Customer action: If you’d like to join the beta, contact your Dropzone team.

Improvements

Custom Instructions

• Improved handling of complex custom instructions to support more reliable multi-step follow-ups during investigations.

Alert Readability

• Alert titles are now automatically shortened when overly long for improved readability.

Authorized Security Tooling Traffic

• Improved investigation outcomes for traffic generated by authorized security tools, reducing noise from expected scanning activity.

Phishing Investigations

• Improved parsing of phishing emails, including better support for uncommon message encodings.

Integration Improvements

SentinelOne

• Added severity-based alert filtering options.

• Expanded exclusion filtering and improved handling of very large process trees.

Customer action: Review SentinelOne severity and exclusion filter settings if you want finer control over ingested alerts.

Azure Log Analytics

• Improved setup experience with automatic discovery of workspaces and related metadata.