Updated the Microsoft Defender XDR with Graph API sensor to support monitoring for Microsoft Defender for Cloud, Microsoft Defender for Cloud Apps, Microsoft Defender for Endpoint, Microsoft Defender for Identity, and Microsoft Defender for Office 365. Going forward, customers only need to set up a Microsoft Defender XDR with Graph API sensor to monitor their Microsoft Defender services.

For more information, see Configure Microsoft Defender XDR with Graph API for Arctic Wolf monitoring and Microsoft Graph v.1.0 Alerts API Deprecation FAQ.

Added the onboarding experience functionality in the Unified Portal. Users can now complete onboarding tasks from the Organization Overview page, such as adding information about the organization's users, sites, and sensors. For more information, see Manage onboarding and setup tasks.

Added support for CrowdStrike Falcon Identity Protection cloud security monitoring, allowing Arctic Wolf to alert you about identity-based threats.

For more information, see Configure CrowdStrike Falcon Identity Protection for Arctic Wolf monitoring.

Added support for Wiz cloud security monitoring, allowing Arctic Wolf to alert you about issues and detections from the Wiz cloud platform.

For more information, see Configure Wiz for Arctic Wolf monitoring.

Notifications

For more information, see Configure notification preferences.

Added the ability to rescan up to 200 assets on the Impacted Assets page.

For more information, see Rescan an asset.

Added the new Risk Remediation Trends widget, which allows you to view the results of your remediation efforts over a specific time range and compare it with incoming risks.

For more information, see View your risk metrics.

For more information, see Aurora Security Assistant.

For more information, see Table column descriptions and View your coverage score.

Added the ability to view risks grouped by suggested remediation, for example, the software version to upgrade to or configuration change to apply to resolve risks. Each remediation identifies the number of assets impacted and total number of risks that will be fixed if the remediation is applied. You can export the remediation data into a CSV file, so that you can process, share, or import it into another system

For more information, see Risks table, Risk filters, Export remediation data, and View assets impacted by remediation.

The end of technical support dates for the Aurora Protect 3.2 and Aurora Focus 3.2 agents have been extended to May 19, 2026. This allows for more time to upgrade from these versions and make sure devices remain protected. For more information, see the Aurora Protect and Aurora Focus software lifecycles.

For more information, see Sensor upgrades.

Added visual representations of your Cyber Resilience Index to reports generated for the Cyber Resilience Assessment.

For more information, see Download a Cyber Resilience Assessment report.

Added the ability to integrate your ITSM solution with the Unified Portal, which allows you to create tickets for risks and track risk remediation.

For more information, see Integrate your ITSM solution with the Unified Portal, Create an ITSM ticket for the risks in your organization, Risks table, and View risk details.

For more information, see View your risk metrics.

Added saved filters to the Risks page. You can now view, save, edit, apply, and delete custom filter sets. This makes it easier for you to view data with filters applied that you regularly use, and saves you time with administrative tasks.

For more information, see Risk filters.

Added the ability to rescan an asset outside of a scan schedule. This allows you to verify changes made to an asset without waiting for the next scan window to complete.

For more information, see Rescan an asset.

Added the Security Investigations page under the Tickets & Alerts section of the navigation menu. This page allows you to view details for ticketed or closed investigations, including the investigation timeline of actions taken.

For more information, see Security Investigations.

For more information, see View customer organizations.