https://cybertoolchain.io/tools/realm-security New releases and features in Realm Security, tracked by The Cyber Toolchain. en Thu, 10 Sep 2026 13:48:20 GMT https://realm.security/context-driven-siem-log-reduction/ https://realm.security/context-driven-siem-log-reduction/ Thu, 10 Sep 2026 13:48:20 GMT Realm adds Reduction Rule Assessments with Reasoning and Considerations sections powered by Clarity AI for every recommended SIEM log reduction rule.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Reduction Rule Assessments — AI-generated evaluations shipped with every recommended reduction rule, split into a 'Reasoning' section (why the rule is likely effective) and a 'Considerations' section (where it may not be appropriate for a given environment).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Realm Clarity AI now reasons over what your sources produce and what each destination needs to generate rule assessments tuned to the actual conditions defined in each rule, not generic category descriptions. • Detection Integrity maps every candidate reduction against the detections you currently run, protects the log fields those detections depend on, and flags at-risk detections as findings rather than silently cutting their data. • Data Haven retains a complete, immutable copy of all reduced log data with OCSF observables attached, keeping it searchable and re-suppliable to any destination if a reduction proves incorrect. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/realm-security https://realm.security/realm-databricks-zerobus-ingest/ https://realm.security/realm-databricks-zerobus-ingest/ Tue, 04 Aug 2026 14:30:06 GMT Realm now streams parsed, OCSF-normalized, enriched security logs directly into Databricks Delta Lake via the Zerobus Ingest push API, governed by Unity Catalog. • New Databricks integration delivers security telemetry directly into Unity Catalog Delta tables via Zerobus Ingest, Databricks' serverless push-based ingestion API, with no customer-managed staging bucket or message bus. • Realm streams both raw logs and parsed, OCSF-normalized versions simultaneously, letting teams route raw events to Bronze and structured data to Silver within their medallion architecture. • Real-time enrichment with GeoIP, threat intel, and customer-supplied CMDB or HRIS context is applied as events flow through, before they land in the lakehouse. • Output feed is configured through the Realm UI; once the Databricks target table, Zerobus Ingest endpoint, and access credentials are created, data flows with no additional pipeline to build or maintain. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/realm-security https://realm.security/realm-security-debuts-detection-integrity/ https://realm.security/realm-security-debuts-detection-integrity/ Tue, 28 Jul 2026 12:38:53 GMT Realm Security adds Detection Integrity and Data Haven Search to cut SIEM volume without breaking coverage. • New Detection Integrity capability reads every SIEM detection, maps each rule to its dependent log sources and fields, and auto-generates pipeline protection rules to preserve coverage as volume is reduced — supporting Sigma, KQL, and SPL. • Detection Integrity produces a shareable report showing what was reduced, what was protected, projected savings, and MITRE ATT&CK coverage before and after each reduction; when a cut cannot be applied safely, it flags the finding instead of cutting. • New search inside Realm Data Haven lets analysts query their full immutable security history directly against OCSF-normalized observables and resupply exact events to any destination — no restore step, no schema setup, no data-lake infrastructure required. • Data Haven Search launches with unmetered queries: pricing is based on ingestion volume, not on how much analysts query or retrieve. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/realm-security