Skip to main content
Version: 1.0.8

SIEM+ Release Notes

Here are the main improvements in each SIEM+ version, explained in terms of what you can do and what you will notice.

1.0.8​

More reliable everyday workflows​

  • New accounts use UTC by default, keeping schedules and dates consistent until you choose a different time zone.
  • Case details now show related alert counts clearly, including when there are no alerts.
  • Scheduled tasks and Microsoft Sentinel data updates are more reliable, especially during startup and larger data loads.
  • Marking all notifications as read is more efficient.

1.0.7​

Official Microsoft Sentinel support​

  • SIEM+ now officially supports Microsoft Sentinel. Configure a tenant and credentials to ingest incidents and alerts, and build user behavior profiles from Sentinel authentication events.
  • Configure Sentinel tenant and application credentials in Account Settings > Integrations, optionally select an Advanced Hunting workspace, and manage each agent’s operational settings from Agents.
  • Use the three Sentinel agents for alert ingestion, user behavior profiles, and hourly heartbeat data from normalized ASIM tables, with more reliable paging, retries, and incremental synchronization.

More reliable reports and scores​

  • Generate validated daily and weekly PDF reports with account time-zone-aware dates, localized labels, and notifications based on the same report data.
  • Select score snapshots by report day so the dashboard and score page show the correct result.

Clearer dashboards and cases​

  • Review more reliable dashboard summaries, account activity, report navigation, and implementation-plan previews in cases.
  • See case closure reasons in notifications, including when SIEM+ closes a case automatically, and invite account users before their first sign-in.

1.0.6​

Understand user behavior and data access​

  • Open User Behavior Profiles to review activity patterns by account and inspect details in your selected time zone.
  • Review Access History to see who accessed account data, when they accessed it, and which channel they used.
  • If a browser or network request is interrupted while access is being recorded, the original request no longer fails with an error.

Get clearer dashboard and score insights​

  • See the latest alert statistics when the dashboard opens, with clearer threat-hunting summaries and more readable score visuals.
  • Load dashboard data faster, with clearer status messages and improved keyboard and screen-reader accessibility.
  • Review score history for the most recent two weeks with clearer labels and colors.

Work with cases and notifications more easily​

  • See active case tag filters, and keep case charts aligned with the cases currently shown.
  • Preview case Markdown safely, follow clearer links, and view account-scoped indicators of compromise (IOC) summaries by hovering over an indicator.
  • See recent cases first in notifications, understand notification status through clearer colors, and dismiss the notification panel by clicking outside it.

Maintain account data and sign in more reliably​

  • Request a heartbeat refresh for a specific local day from Account Settings when historical data needs to be rebuilt. The next heartbeat download refreshes only that day, and the action clearly shows when the request is in progress.
  • Return to the page you were using more reliably after signing in again, including with Google sign-in.
  • Use more complete Japanese and Traditional Chinese translations across the interface.

1.0.5​

Better analysis and alert data​

  • Build account-scoped user behavior profiles from DEVO authentication and Windows events with improved recovery and memory use.
  • Refresh DEVO alerts every six hours with richer source data and MITRE classification details.

Easier automation and navigation​

  • Use clearer agent names, simpler schedule controls, and more reliable duplicate-run prevention.
  • Sort nested accounts more clearly and improve mobile layouts across account and report pages.
  • Rename Auditor View to Compliance.

Better editing and sign-in​

  • Edit and view case and report Markdown with a consistent multiline editor and preview.
  • Return to the page you were viewing after signing in again when your session expires.

More dependable automation and notifications​

  • See in-app notifications for recent account activity, mark them as read, and automatically remove older notifications.
  • Keep scheduled tasks in sync and recover overdue tasks automatically.
  • Save account and agent changes more reliably.

More reliable integrations and reporting​

  • Continue collecting DEVO data more reliably during temporary service interruptions and preserve alert source details.
  • Improve score and audit report generation and notification delivery.

1.0.4​

More reliable report notifications​

  • Score and audit notifications generate fresh PDF attachments before sending email.
  • Score notifications use the current score data directly, including manual runs.
  • Notification subjects identify whether the attachment is a score or audit report.
  • Audit report notifications run by default every Friday at 12:00 UTC.

Easier automation management​

  • Sort agents by name in either direction.
  • Filter agents by keyword, including the all keyword to show every agent.
  • Switch between tile and list views on the Agents page.

1.0.3​

Easier account and notification settings​

  • Open personal settings or sign out from the new user menu.
  • Find parent accounts and sub-accounts more easily.
  • Choose whether to receive report notifications and which language to use for them.
  • Switch between multiple accounts more comfortably.

Smoother alert work​

  • Alerts can now be closed automatically when they meet the configured conditions.
  • Alert information is clearer and more complete when details are available.
  • Searching alerts by account and date is faster.

1.0.2​

More useful automation​

  • Find and review related cases more easily.
  • Manage which automated tasks are active from the Agents page.
  • Prevent inactive tasks from being started by mistake.
  • Review task history in a clearer format.

More dependable alert data​

  • Alert and system activity updates are faster and more reliable.
  • SIEM+ can identify and recover from gaps in daily alert information.
  • Interrupted updates resume more smoothly.
  • Choose how long alerts should be kept and let SIEM+ clean up older alerts automatically.
  • Refresh alerts for a specific date when you need to check or correct the data.

Better reports, cases, and scores​

  • Executive PDF reports are more consistent to generate and download.
  • Manage report recipients, attachments, and notification preferences more easily.
  • Review daily audit reports and compare results by date.
  • Visualize, share, filter, and organize cases more easily.
  • Move between dates and report versions from the score page.
  • Edit and read remediation recommendations and implementation plans more comfortably.

1.0.1​

More control over alerts and accounts​

  • Refresh alerts for a selected date.
  • Set an alert retention period and remove older alerts automatically.
  • See clearer messages when an account is not available to you.
  • Use account time zones consistently for schedules and dates.

Improved reports and case management​

  • Choose report recipients, report types, languages, and email attachments.
  • Create, share, filter, escalate, and close cases from SIEM+.
  • Review daily audit reports and their history.
  • View and edit remediation recommendations and implementation plans with clearer formatting.

Better visibility into security activity​

  • Schedule automated tasks and review their activity history.
  • Monitor system activity and alert-processing trends.
  • Review score history, report details, and data-quality information.