https://cybertoolchain.io/tools/datadog-cloud-siem New releases and features in Datadog Cloud SIEM, tracked by The Cyber Toolchain. en Sun, 04 Oct 2026 07:49:04 GMT https://docs.datadoghq.com/security/cloud_siem/ https://docs.datadoghq.com/security/cloud_siem/ Sun, 04 Oct 2026 07:49:04 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadog-cloud-siem https://docs.datadoghq.com/security/cloud_siem/ https://docs.datadoghq.com/security/cloud_siem/ Tue, 22 Sep 2026 07:44:44 GMT Datadog Cloud SIEM adds Dynamic Severity rules, Env Remapping, Code Channels in Slack, and Data Access Control for signals.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Dynamic Severity rules to adjust the severity of security signals based on the assets they affect, with customizable severity levels, custom tags, and rule-scoped isolation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds role-, team-, and user-level access controls for Dynamic Severity rules, requiring at least one editor role the current user belongs to before saving. • Adds Object Storage Request Estimation capability. • Adds out-of-the-box integrations for Palo Alto Networks Firewall, Windows Event Logs, and Wiz. • Adds New Suppression rules for Cloud SIEM detections. • Improves Bits Investigation accuracy. • Adds below-threshold (`a < N` and `a <= 0`) detection cases to Threshold detection rules alongside the existing above-threshold (`a > N`) case. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadog-cloud-siem