Release Notes Version 6.4.0 (August 2026) Removed Alerts Network - Spike in Traffic over SMB Enhancements Renamed Windows - SMB Lateral Movement to Multiple Hosts to Network - SMB Lateral Movement to Multiple Hosts and enhanced detection logic. Enhanced Network - SMB Lateral Movement to Multiple Hosts alert query. Enhanced tstats based alert query time span calculation logic. Updated cs_basic_network_scanning_threshold value. Bug fixes Filter macro naming consistency fixes Renamed several filter macros to follow the standard _filter naming convention: cs_gws_google_drive_objects_accessed_by_external_user → cs_gws_google_drive_objects_accessed_by_external_user_filter cs_sophos_potentially_unwanted_application_pua → cs_sophos_failed_to_cleanup_potentially_unwanted_application_filter cs_system_processes_run_from_unexpected_locations_filter → cs_windows_fake_windows_processes_filter cs_windows_defender_endpoint_not_protected → cs_windows_defender_endpoint_not_protected_filter Updated query of Cyences - SOAR Forward Retry search to fix issue in retry of send to soar. Fixed issue in all streaming commands to run on search head only. Fixed the Teams dropdown value issue on the Cyences Alerts page. It will now display the value exactly as received from the backend and store it without any modifications. Table of contents