Mar 2025 Release Notes (RUX)

The Respond UX March release (2025.03) includes:

Enriching AI Prioritization Context

Vectra now surfaces tailored attack profiles when detections span multiple attack surfaces, helping to identify complex threats with greater clarity. Two new profile types have been introduced:

• Hybrid Network Adversary: Indicates an attacker active in both network identity and cloud identity environments, suggesting coordinated activity across on-premises and cloud infrastructure.

• Multi-Cloud Service Adversary: Represents an attacker operating across multiple cloud-based services—such as identity providers, SaaS platforms, or public cloud environments—without direct engagement with network identity systems.

These profiles are designed to reflect the nature of hybrid threats and enhance threat context in the UI.

Support AI Triage for Azure Detections

Vectra is enhancing support for Azure detections by enabling AI Triage for Azure CDR (Cloud Detection and Response) alerts. For each existing Azure detection type, we are evaluating and applying appropriate AI distillation algorithms, defining relevant context fields, and addressing any specific handling requirements. This will help surface high-fidelity insights more efficiently and improve detection clarity within the platform.