Dynatrace Hub - Threats & Exploits latest releases

Threats & Exploits 1.29.1

Mon, 12 Oct 2026 08:17:02 +0000

Patch Changes

Fix an issue in RVA settings showing as misconfigured wrongly

Threats & Exploits 1.29.0

Wed, 07 Oct 2026 05:46:32 +0000

Minor Changes

When opening an investigation from a finding, the investigation now receives the name of each query alongside its content, giving the investigation tool richer context to work with.

Threats & Exploits 1.28.0

Mon, 21 Sep 2026 07:33:23 +0000

Minor Changes

You can now add filters directly from entity cards in the finding detail view, including the affected entity card, entry point card, and request card, making it easier to narrow findings to a specific entity without leaving the detail panel.
The quick-action menu is now visible on hover across more plain-text fields in the finding detail view, including request, vulnerability, and cloud context sections.
A Share feedback option is now available in the Help menu, letting you send feedback about the Threats & Exploits app from anywhere in the application.

Patch Changes

Fixed an issue where the related findings card would silently truncate results; the card now shows a warning when the number of related findings exceeds the display limit.
Fixed an issue where the findings chart used severity-level colors when aggregating by a field other than severity, causing misleading color coding for non-severity groupings.
Fixed an issue where applying a filter from an entity context menu in the finding detail view did not update the main filter bar as expected.

Threats & Exploits 1.27.1

Mon, 07 Sep 2026 06:59:00 +0000

Patch Changes

Fixed display and filtering issues in the MITRE ATT&CK card that occurred when a finding had no matching tactics or sub-techniques — sections now render cleanly and filter calls no longer run unnecessarily.
Fixed an issue where searching findings by free text from the filter bar did not apply to the results, returning an unfiltered list instead.
Fixed the close button being misaligned in the finding detail panel when the finding has no title.
Findings without a title now show an italic placeholder label in the detail panel header and in the related findings list, instead of appearing blank.
Fixed an issue where findings with an empty affected entity name showed a blank entity label in the detail panel; the entity ID is now used as a fallback. Findings missing a creation time also now load correctly instead of failing to display.

Threats & Exploits 1.27.0

Tue, 25 Aug 2026 08:50:55 +0000

Minor Changes

Added a MITRE ATT&CK card to the finding detail page, displaying the associated tactics and techniques with a detail modal for in-depth information.

Patch Changes

Fixed the Smartscape filter in the entity context menu to only trigger lookups for valid Smartscape entity types, preventing incorrect queries.
Fixed the source card context menu to correctly handle non-ID entity references, preventing invalid queries from being sent.

Threats & Exploits 1.26.0

Thu, 06 Aug 2026 06:52:48 +0000

Minor Changes

Finding detail pages now display a cloud context card with AWS, Azure, or GCP resource metadata when those fields are present on a finding
Investigation guidance card now executes DQL queries inline in a modal instead of opening the Investigator app
Source card now uses the standard observability key-value list component for improved rendering consistency
Source card correctly remeasures virtualized row heights when expanding or collapsing long values, preventing collapsed rows from retaining their expanded height
Findings table now has a general search option

Threats & Exploits 1.25.0

Mon, 27 Jul 2026 06:30:13 +0000

Minor changes

Add remediation action card in case finding.remediation is part of the finding
Improved empty state handling for Actor, Affected object and Related entities cards
Add evidence query to list of Investigation guidance queries if available
Added description card and useing finding.url for backlinks

Threats & Exploits 1.24.0

Tue, 14 Jul 2026 07:25:13 +0000

Minor Changes

Replaced Vulnerability and Detection finding buttons with the new Security Chip component.

Patch Changes

Removed legacy idClassic and entityId fields.

Threats & Exploits 1.23.0

Tue, 30 Jun 2026 08:16:04 +0000

Minor Changes

Removed Monitored Entities path from Related Entities Card and replaced it with full Smartscape compatibility
Removed "Process group", "Process" and "Affected entity" filters

Patch Changes

Change styling of surface elements in Detection sources to improve color contrast
Remove Monitored Entity fallback from the Affected Object card
Reduce required scopes for the app

Threats & Exploits 1.22.1

Tue, 16 Jun 2026 05:28:36 +0000

1.22.1

Minor Changes

Add related smartscape node ID filter + updated view-findings-for-entity intent

Threats & Exploits 1.21.0

Wed, 20 May 2026 05:59:53 +0000

Minor Changes

Batch in-table settings changes

Threats & Exploits 1.20.0

Thu, 07 May 2026 10:13:12 +0000

1.20.0

Minor Changes

Showing aggregation chips in main findings table when grouping is active
Add "Add as filter" to findings chart legend actions

1.19.0

Minor Changes

Add view-findings-for-entity intent to navigate T&E with entity-scope filter

Threats & Exploits 1.18.0

Tue, 07 Apr 2026 05:19:34 +0000

1.18.0

Minor Changes

Add support for custom enrichment in integrations list.
Added new intent to open integration screen

Patch Changes

Improve security-intelligence AI context truncation

Threats & Exploits 1.17.0

Wed, 25 Mar 2026 07:35:47 +0000

1.17.0

Minor Changes

Affected object lookup extended to also consider object.id to find Smartscape node

Threats & Exploits 1.16.3

Tue, 10 Mar 2026 10:47:41 +0000

Fixes and maintenance

Use different logic to reduce app function response size

1.16.2

Fixes and maintenance

Use toSmartscapeId to convert string ids for comparisons

1.16.1

Fixes and maintenance

Renamed "Open case" to "Open investigation" to align naming
Fixed issues in smartscapeNode query

1.16.0

Feature updates

All security.events queries are now free of charge.

Fixes and maintenance

Disabled entity intents for smartscape_source.id
Findings with actor.ips not conforming to the semantic dictionary are filtered out

Threats & Exploits 1.15.0

Wed, 25 Feb 2026 08:26:38 +0000

Feature updates

Finding Details now provides "Open case" intent in Investigation guidance section for easier analysis

Fixes and maintenance

Findings Details now shows Details tab by default for all findings, selected tab is persisted for the session

Threats & Exploits 1.14.0

Mon, 09 Feb 2026 08:48:41 +0000

Feature updates

Findings table: you can now group rows to organize related findings.
Finding details: the details view now shows insights into related findings.

Fixes and maintenance

Fix: investigation queries are again offered when a finding contains only an actor IP or a trace ID.

Threats & Exploits 1.13.1

Fri, 23 Jan 2026 08:09:42 +0000

Fixes and maintenance

Updated Kubernetes filters and added column grouping for Kubernetes and Hyperscaler columns
Fixed issues in investigation guidance queries
Removed support for events using detection.type, detection.action and dt.security.rap.action fields

Threats & Exploits 1.13.0

Tue, 13 Jan 2026 18:19:39 +0000

Feature updates

Remove ownership component from Affected Object card
Added filters to better filter for Hyperscaler and Kubernetes-specific fields
Added columns to the findings table to show Hyperscaler and Kubernetes-specific data.
Added view topology button for Dynatrace monitored entities

Fixes and maintenance

Improved clarity of settings permission tooltip
Fixed alignment issues in the form fields for allowlist rules in RAP settings

Threats & Exploits 1.12.1

Wed, 07 Jan 2026 09:19:13 +0000

Fixes and maintenance

Fix duplicated input field in Allowlist form