Dynatrace Hub - Threats & Exploits latest releases

Threats & Exploits 1.27.0

Tue, 25 Aug 2026 08:50:55 +0000

Minor Changes

Added a MITRE ATT&CK card to the finding detail page, displaying the associated tactics and techniques with a detail modal for in-depth information.

Patch Changes

Fixed the Smartscape filter in the entity context menu to only trigger lookups for valid Smartscape entity types, preventing incorrect queries.
Fixed the source card context menu to correctly handle non-ID entity references, preventing invalid queries from being sent.

Threats & Exploits 1.26.0

Thu, 06 Aug 2026 06:52:48 +0000

Minor Changes

Finding detail pages now display a cloud context card with AWS, Azure, or GCP resource metadata when those fields are present on a finding
Investigation guidance card now executes DQL queries inline in a modal instead of opening the Investigator app
Source card now uses the standard observability key-value list component for improved rendering consistency
Source card correctly remeasures virtualized row heights when expanding or collapsing long values, preventing collapsed rows from retaining their expanded height
Findings table now has a general search option

Threats & Exploits 1.25.0

Mon, 27 Jul 2026 06:30:13 +0000

Minor changes

Add remediation action card in case finding.remediation is part of the finding
Improved empty state handling for Actor, Affected object and Related entities cards
Add evidence query to list of Investigation guidance queries if available
Added description card and useing finding.url for backlinks

Threats & Exploits 1.24.0

Tue, 14 Jul 2026 07:25:13 +0000

Minor Changes

Replaced Vulnerability and Detection finding buttons with the new Security Chip component.

Patch Changes

Removed legacy idClassic and entityId fields.

Threats & Exploits 1.23.0

Tue, 30 Jun 2026 08:16:04 +0000

Minor Changes

Removed Monitored Entities path from Related Entities Card and replaced it with full Smartscape compatibility
Removed "Process group", "Process" and "Affected entity" filters

Patch Changes

Change styling of surface elements in Detection sources to improve color contrast
Remove Monitored Entity fallback from the Affected Object card
Reduce required scopes for the app

Threats & Exploits 1.22.1

Tue, 16 Jun 2026 05:28:36 +0000

1.22.1

Minor Changes

Add related smartscape node ID filter + updated view-findings-for-entity intent

Threats & Exploits 1.21.0

Wed, 20 May 2026 05:59:53 +0000

Minor Changes

Batch in-table settings changes

Threats & Exploits 1.20.0

Thu, 07 May 2026 10:13:12 +0000

1.20.0

Minor Changes

Showing aggregation chips in main findings table when grouping is active
Add "Add as filter" to findings chart legend actions

1.19.0

Minor Changes

Add view-findings-for-entity intent to navigate T&E with entity-scope filter

Threats & Exploits 1.18.0

Tue, 07 Apr 2026 05:19:34 +0000

1.18.0

Minor Changes

Add support for custom enrichment in integrations list.
Added new intent to open integration screen

Patch Changes

Improve security-intelligence AI context truncation

Threats & Exploits 1.17.0

Wed, 25 Mar 2026 07:35:47 +0000

1.17.0

Minor Changes

Affected object lookup extended to also consider object.id to find Smartscape node

Threats & Exploits 1.16.3

Tue, 10 Mar 2026 10:47:41 +0000

Fixes and maintenance

Use different logic to reduce app function response size

1.16.2

Fixes and maintenance

Use toSmartscapeId to convert string ids for comparisons

1.16.1

Fixes and maintenance

Renamed "Open case" to "Open investigation" to align naming
Fixed issues in smartscapeNode query

1.16.0

Feature updates

All security.events queries are now free of charge.

Fixes and maintenance

Disabled entity intents for smartscape_source.id
Findings with actor.ips not conforming to the semantic dictionary are filtered out

Threats & Exploits 1.15.0

Wed, 25 Feb 2026 08:26:38 +0000

Feature updates

Finding Details now provides "Open case" intent in Investigation guidance section for easier analysis

Fixes and maintenance

Findings Details now shows Details tab by default for all findings, selected tab is persisted for the session

Threats & Exploits 1.14.0

Mon, 09 Feb 2026 08:48:41 +0000

Feature updates

Findings table: you can now group rows to organize related findings.
Finding details: the details view now shows insights into related findings.

Fixes and maintenance

Fix: investigation queries are again offered when a finding contains only an actor IP or a trace ID.

Threats & Exploits 1.13.1

Fri, 23 Jan 2026 08:09:42 +0000

Fixes and maintenance

Updated Kubernetes filters and added column grouping for Kubernetes and Hyperscaler columns
Fixed issues in investigation guidance queries
Removed support for events using detection.type, detection.action and dt.security.rap.action fields

Threats & Exploits 1.13.0

Tue, 13 Jan 2026 18:19:39 +0000

Feature updates

Remove ownership component from Affected Object card
Added filters to better filter for Hyperscaler and Kubernetes-specific fields
Added columns to the findings table to show Hyperscaler and Kubernetes-specific data.
Added view topology button for Dynatrace monitored entities

Fixes and maintenance

Improved clarity of settings permission tooltip
Fixed alignment issues in the form fields for allowlist rules in RAP settings

Threats & Exploits 1.12.1

Wed, 07 Jan 2026 09:19:13 +0000

Fixes and maintenance

Fix duplicated input field in Allowlist form

Threats & Exploits 1.12.0

Tue, 16 Dec 2025 15:09:23 +0000

Feature updates

Affected entity, related entity, and entities in the Source tab are linked to their respective apps if supported
Offer "Open in Investigations", "Open in Notebooks", and "Open with" from the table and finding details
Investigation guidance is collapsible and shows the number of queries
Increased the number of investigation guidance queries

Fixes and maintenance

Renamed "Properties" button to "Show properties".
Add support for downloading table as CSV for fields: ID, Affected entity, Affected Smartscape node, and Vulnerability
storage:smartscape:read permission is now mandatory to avoid issues loading Smartscape related data in the findings table

Threats & Exploits 1.11.0

Thu, 20 Nov 2025 14:49:46 +0000

Feature updates

Added "Investigation Guidance" section to replace the "Logs" tab

Threats & Exploits 1.10.1

Mon, 03 Nov 2025 12:13:24 +0000

Fixes and maintenance

Segment selector is visible again

Threats & Exploits 1.10.0

Thu, 30 Oct 2025 14:54:37 +0000

Feature updates

Added intent links to “Affected entity” and “Affected Smartscape node” columns
Moved segments and timeframe selector to the filter bar line
Added affected object and related entity context to conversation starter
Added Properties details to “Affected object” and “Related entities” cards
Added context value to the Prevalence chart sparkline