FonctionnalitéLogPulse SIEM: real-time detections, MITRE ATT&CK coverage, risk-based alerting, and a Notables triage workflow
FonctionnalitéThreat intelligence: IOC store, manual watchlists, Spamhaus ASN-DROP feeds, and a threat landscape with geo map and IOC enrichment of risk events
FonctionnalitéUEBA behavior baselines with impossible-travel, first-seen, and volume-spike detection
FonctionnalitéSOAR response actions gated behind propose-and-approve, so the AI proposes and a human approves before anything runs
FonctionnalitéSigma rule import: transpile and bulk-import SigmaHQ rules to LPQL, with ~3,000 rules bundled as managed content packs
FonctionnalitéService Intelligence: entity discovery, service mapping, KPIs, anomaly detection, and blast-radius analysis
FonctionnalitéOAuth-secured MCP server: connect Claude and other AI agents to your read tools, plus propose-and-approve write tools for detections, alerts, KPIs, and pipelines
FonctionnalitéCloud connectors for Entra ID, Microsoft 365, and AWS CloudTrail, with canonical cloud-audit normalization
FonctionnalitéAI-driven notable investigations with auto-close, re-investigate, and server-side log-pattern compression
FonctionnalitéFull invoicing system: VAT invoices with PDF, VIES validation, and AI credit top-ups
FonctionnalitéAmazon Bedrock as an AI provider for EU/GDPR (AVG) data residency
AméliorationConsolidated Security and Observability hubs with tabbed navigation
CorrectionGeoIP enrichment now loads reliably at worker startup via the ClickHouse dictionary
v0.11.0May 2026Unified Workspace & Agent Fleet
FonctionnalitéUnified Workspace bringing AI investigation and LPQL search together under /workspace with split and inline canvas layouts
FonctionnalitéSource-and-time scope picker to target investigations across logs, dashboards, pipelines, alerts, and lookups
FonctionnalitéQuick Ask overlay: ask Byte from anywhere via the header button or Ctrl+I, replacing the old slide-out
FonctionnalitéAgent Fleet management: bulk upgrades, one-click remote actions, and Vector run-state with last-heartbeat visibility
FonctionnalitéManaged Proxmox VE pipeline template with a guided setup wizard
FonctionnalitéOnboarding tour and getting-started checklist on the home page
FonctionnalitéNew input types including auditd and Proxmox syslog, plus built-in parser templates on the Fleet page
FonctionnalitéWorkspace Activity feed merging searches and sessions, plus a Saved + Recent LPQL library
AméliorationReal-time toast notifications over a shared SSE stream, with reconnect that keeps investigations live across page navigation
AméliorationBrotli/gzip response compression and AI prompt caching for faster, cheaper queries
CorrectionQueries are now killed on client disconnect, freeing ClickHouse resources mid-stream
v0.10.0April 2026AI Investigator, v2
FonctionnalitéByte: rebranded AI assistant (formerly Copilot) integrated in dashboard and header
FonctionnalitéWorkspace knowledge tools: investigator now draws on saved data models, services, and parser rules
FonctionnalitéProactive get_system_health_snapshot tool for single-pass health checks
FonctionnalitéScope checks and honest insight-mode reporting in AI investigations
Fonctionnalitéupdate_panel / remove_panel events on the investigation canvas
Améliorationisolated-vm sandboxing for safer pipeline execution
AméliorationPulse animation on PulseCanvas for live log visualisation
AméliorationLogTable events mode with richer parsed-field and attribute rendering
AméliorationStats queries and visualizations overhaul for faster dashboards
CorrectionIPv4-mapped IPv6 handling in BLOCKED_IP_RANGES
v0.9.0March 2026Visual Pipelines & Kubernetes
FonctionnalitéVisual Pipeline editor with drag-and-drop node library
FonctionnalitéKubernetes integration via Helm chart
AméliorationLPQL syntax highlighting in docs
FonctionnalitéVector agent support
v0.8.0February 2026
FonctionnalitéAI Anomaly Detection with Modified Z-Score algorithm
Nous utilisons des cookies pour analyser le trafic du site et améliorer ton expérience. Aucun cookie n'est placé sans ton consentement. Politique de confidentialité