November 5, 2026

In-console Notes on Detection Center, Suspicious Activity, and Managed Services Cases

Improvement

Add notes directly to detections, suspicious activity incidents, and Managed Services cases in Nebula. This keeps investigation findings, actions, and decisions with the item instead of in a separate tool. Use the Add a note composer at the bottom of the details panel on those pages. 

Network activity in the Process Graph

Improvement

Added network activity for each process on the process graph for Suspicious Activities and Flight Recorder Search results. Open a process's activity details to see its inbound and outbound connections to both private and public addresses, along with the timestamp, connection type, protocol, domain, remote address (IPv4 or IPv6), and remote port of each.