https://cybertoolchain.io/tools/dropzone-ai New releases and features in Dropzone AI, tracked by The Cyber Toolchain. en Sun, 01 Mar 2026 00:00:00 GMT https://docs.dropzone.ai/release-summary/2026/release-202603-summary https://docs.dropzone.ai/release-summary/2026/release-202603-summary Sun, 01 Mar 2026 00:00:00 GMT Dropzone AI March 2026 adds Rapid7 InsightIDR (Beta), ServiceNow investigation integration, Threat Hunter catalog, Context Memory API and Swimlane enrichment. • `Rapid7 InsightIDR` integration: alert ingestion, user/device enrichment, process-tree analysis, LEQL query support • `ServiceNow` integration: query incidents, request items, alerts during investigations; configurable table selection for investigations • `Threat Hunter` catalog and reporting (Beta): browse hunt definitions, review hunt results with timelines and findings • Introduction of `Context Memory API`: filtering, search, sorting, pagination • `Swimlane Threat Intelligence` integration: enrichment for IPs, domains, URLs, hashes, email indicators; supports customer-owned intelligence sources Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dropzone-ai https://docs.dropzone.ai/release-summary/2026/release-202602-summary https://docs.dropzone.ai/release-summary/2026/release-202602-summary Sun, 01 Feb 2026 00:00:00 GMT Dropzone AI adds Threat Intel workspace, blast radius analysis, ANY.RUN integration, and new analyst workflows in February 2026 • Introduces `Threat Intel` workspace for managing Dropzone-provided and customer-provided indicator collections • Adds **blast radius analysis (Beta)** to identify impacted users, hosts, and assets for email incidents • Adds **ANY.RUN** integration for sandbox-based enrichment of files, URLs, domains, and IPs • Releases early **Threat Hunter catalog and reporting (Beta)** for threat hunting workflows • Adds `Detection objective summaries` to explain alert intent in plain language • Adds **outcome comparison dashboards (Beta)** to track investigation accuracy against analyst feedback Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dropzone-ai https://docs.dropzone.ai/release-summary/2026/release-202601-summary https://docs.dropzone.ai/release-summary/2026/release-202601-summary Thu, 01 Jan 2026 00:00:00 GMT New Integration Management APIs, Customer Settings APIs, multi-signal investigations, and new UI swimlane view. • Adds `Integration Management APIs` to list, create, update, test, enable/disable, and delete integrations • Adds `Customer APIs` to manage response actions, configure investigation thresholds, and manage global company settings • Introduces multi-signal alert investigations that break large SIEM cases into focused sub-investigations with a single consolidated conclusion • Adds new insight tags `Invalid Credentials` and `Research Scanner` for better signal clarity • Expands integration coverage with Azure Monitor / Log Analytics, Vectra AI, and Exabeam (Beta) • Launches a new investigation list view with swimlanes for faster prioritization Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dropzone-ai