Release Notes

Version 6.4.0 (August 2026)

  • Removed Alerts

    • Network - Spike in Traffic over SMB
  • Enhancements

    • Renamed Windows - SMB Lateral Movement to Multiple Hosts to Network - SMB Lateral Movement to Multiple Hosts and enhanced detection logic.
    • Enhanced Network - SMB Lateral Movement to Multiple Hosts alert query.
    • Enhanced tstats based alert query time span calculation logic.
    • Updated cs_basic_network_scanning_threshold value.
  • Bug fixes

    • Filter macro naming consistency fixes
      • Renamed several filter macros to follow the standard _filter naming convention:
        • cs_gws_google_drive_objects_accessed_by_external_usercs_gws_google_drive_objects_accessed_by_external_user_filter
        • cs_sophos_potentially_unwanted_application_puacs_sophos_failed_to_cleanup_potentially_unwanted_application_filter
        • cs_system_processes_run_from_unexpected_locations_filtercs_windows_fake_windows_processes_filter
        • cs_windows_defender_endpoint_not_protectedcs_windows_defender_endpoint_not_protected_filter
    • Updated query of Cyences - SOAR Forward Retry search to fix issue in retry of send to soar.
    • Fixed issue in all streaming commands to run on search head only.
    • Fixed the Teams dropdown value issue on the Cyences Alerts page. It will now display the value exactly as received from the backend and store it without any modifications.

Table of contents


Copyright © 2024 CrossRealms International.

This site uses Just the Docs, a documentation theme for Jekyll.