FunciónLogPulse SIEM: real-time detections, MITRE ATT&CK coverage, risk-based alerting, and a Notables triage workflow
FunciónThreat intelligence: IOC store, manual watchlists, Spamhaus ASN-DROP feeds, and a threat landscape with geo map and IOC enrichment of risk events
FunciónUEBA behavior baselines with impossible-travel, first-seen, and volume-spike detection
FunciónSOAR response actions gated behind propose-and-approve, so the AI proposes and a human approves before anything runs
FunciónSigma rule import: transpile and bulk-import SigmaHQ rules to LPQL, with ~3,000 rules bundled as managed content packs
FunciónService Intelligence: entity discovery, service mapping, KPIs, anomaly detection, and blast-radius analysis
FunciónOAuth-secured MCP server: connect Claude and other AI agents to your read tools, plus propose-and-approve write tools for detections, alerts, KPIs, and pipelines
FunciónCloud connectors for Entra ID, Microsoft 365, and AWS CloudTrail, with canonical cloud-audit normalization
FunciónAI-driven notable investigations with auto-close, re-investigate, and server-side log-pattern compression
FunciónFull invoicing system: VAT invoices with PDF, VIES validation, and AI credit top-ups
FunciónAmazon Bedrock as an AI provider for EU/GDPR (AVG) data residency
MejoraConsolidated Security and Observability hubs with tabbed navigation
CorrecciónGeoIP enrichment now loads reliably at worker startup via the ClickHouse dictionary
v0.11.0May 2026Unified Workspace & Agent Fleet
FunciónUnified Workspace bringing AI investigation and LPQL search together under /workspace with split and inline canvas layouts
FunciónSource-and-time scope picker to target investigations across logs, dashboards, pipelines, alerts, and lookups
FunciónQuick Ask overlay: ask Byte from anywhere via the header button or Ctrl+I, replacing the old slide-out
FunciónAgent Fleet management: bulk upgrades, one-click remote actions, and Vector run-state with last-heartbeat visibility
FunciónManaged Proxmox VE pipeline template with a guided setup wizard
FunciónOnboarding tour and getting-started checklist on the home page
FunciónNew input types including auditd and Proxmox syslog, plus built-in parser templates on the Fleet page
FunciónWorkspace Activity feed merging searches and sessions, plus a Saved + Recent LPQL library
MejoraReal-time toast notifications over a shared SSE stream, with reconnect that keeps investigations live across page navigation
MejoraBrotli/gzip response compression and AI prompt caching for faster, cheaper queries
CorrecciónQueries are now killed on client disconnect, freeing ClickHouse resources mid-stream
v0.10.0April 2026AI Investigator, v2
FunciónByte: rebranded AI assistant (formerly Copilot) integrated in dashboard and header
FunciónWorkspace knowledge tools: investigator now draws on saved data models, services, and parser rules
FunciónProactive get_system_health_snapshot tool for single-pass health checks
FunciónScope checks and honest insight-mode reporting in AI investigations
Funciónupdate_panel / remove_panel events on the investigation canvas
Mejoraisolated-vm sandboxing for safer pipeline execution
MejoraPulse animation on PulseCanvas for live log visualisation
MejoraLogTable events mode with richer parsed-field and attribute rendering
MejoraStats queries and visualizations overhaul for faster dashboards
CorrecciónIPv4-mapped IPv6 handling in BLOCKED_IP_RANGES
v0.9.0March 2026Visual Pipelines & Kubernetes
FunciónVisual Pipeline editor with drag-and-drop node library
FunciónKubernetes integration via Helm chart
MejoraLPQL syntax highlighting in docs
FunciónVector agent support
v0.8.0February 2026
FunciónAI Anomaly Detection with Modified Z-Score algorithm
FunciónLPQL query language with pipe-based commands
MejoraClickHouse-powered search (<200ms P95)
FunciónMulti-tenant architecture
FunciónAPI key management
v0.6.0December 2025Alpha
FunciónCore log ingestion pipeline
FunciónBasic search & filtering
FunciónUser authentication
FunciónInitial dashboard
Utilizamos cookies para analizar el tráfico del sitio y mejorar tu experiencia. No se instala ninguna cookie sin tu consentimiento. Política de privacidad