{"users":[{"id":39724,"username":"s_pellerin","name":"Shane Pellerin","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/5e9695/{size}.png","trust_level":0},{"id":99,"username":"Tania.Severina","name":"Tania Severina","avatar_template":"/user_avatar/community.netwrix.com/tania.severina/{size}/182_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","trust_level":4},{"id":3,"username":"derek.putnam","name":"Derek Putnam","avatar_template":"/user_avatar/community.netwrix.com/derek.putnam/{size}/501_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","admin":true,"trust_level":4},{"id":3536,"username":"sarumugam","name":"Sakthivel A","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/{size}.png","trust_level":1},{"id":552,"username":"ACDunn3","name":"Art Dunn","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/73ab20/{size}.png","trust_level":1},{"id":97,"username":"kevin.joyce","name":"Kevin Joyce","avatar_template":"/user_avatar/community.netwrix.com/kevin.joyce/{size}/645_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","trust_level":3},{"id":-1,"username":"system","name":"system","avatar_template":"/user_avatar/community.netwrix.com/system/{size}/3102_2.png","admin":true,"moderator":true,"trust_level":4},{"id":3969,"username":"Maciek","name":"Maciej Kedzielski","avatar_template":"/user_avatar/community.netwrix.com/maciek/{size}/2086_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","trust_level":1},{"id":13006,"username":"erick.nava","name":"Erick Nava","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/e/8baadc/{size}.png","trust_level":1},{"id":314,"username":"DevonAnderson","name":"Devon Anderson","avatar_template":"/user_avatar/community.netwrix.com/devonanderson/{size}/1436_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","trust_level":1},{"id":616,"username":"justin-eevabits","name":"Justin Cahill","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/j/a183cd/{size}.png","trust_level":2},{"id":307,"username":"mcando","name":"Mike Candon","avatar_template":"/user_avatar/community.netwrix.com/mcando/{size}/621_2.png","flair_name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_group_id":42,"primary_group_name":"netwrix_employees","trust_level":1}],"primary_groups":[{"id":42,"name":"netwrix_employees"}],"flair_groups":[{"id":42,"name":"netwrix_employees","flair_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/e/e1046ceecb5e0407a4719a8288d388c360b94643.png","flair_bg_color":"FFFFFF","flair_color":""}],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/threat-manager/32?page=1","per_page":30,"top_tags":[{"id":7,"name":"threat-manager","slug":"threat-manager"},{"id":105,"name":"announcement","slug":"announcement"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":159,"name":"ideas","slug":"ideas"},{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":136,"name":"under-review","slug":"under-review"},{"id":137,"name":"completed","slug":"completed"},{"id":115,"name":"planned","slug":"planned"},{"id":229,"name":"product-update","slug":"product-update"},{"id":135,"name":"new","slug":"new"},{"id":110,"name":"release-minor","slug":"release-minor"},{"id":226,"name":"mcp","slug":"mcp"},{"id":493,"name":"planned-long-term","slug":"planned-long-term"},{"id":279,"name":"postgresql","slug":"postgresql"},{"id":4,"name":"privilege-secure","slug":"privilege-secure"},{"id":58,"name":"security-advisory","slug":"security-advisory"},{"id":418,"name":"siem","slug":"siem"},{"id":246,"name":"threat-prevention-agents","slug":"threat-prevention-agents"},{"id":237,"name":"alerts","slug":"alerts"},{"id":497,"name":"bug-fix-list","slug":"bug-fix-list"},{"id":358,"name":"database","slug":"database"},{"id":347,"name":"install","slug":"install"},{"id":89,"name":"integration","slug":"integration"},{"id":210,"name":"investigation-reports","slug":"investigation-reports"},{"id":272,"name":"learning-lab","slug":"learning-lab"},{"id":167,"name":"mfa","slug":"mfa"},{"id":198,"name":"ntp-reporting","slug":"ntp-reporting"},{"id":12,"name":"password-management","slug":"password-management"},{"id":200,"name":"playbooks","slug":"playbooks"},{"id":220,"name":"poll","slug":"poll"},{"id":378,"name":"privileged","slug":"privileged"}],"topics":[{"fancy_title":"SIEM variable for the originating domain controller","fancy_title_localized":false,"locale":"en","id":159994,"title":"SIEM variable for the originating domain controller","slug":"siem-variable-for-the-originating-domain-controller","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-10-01T16:06:54.118Z","last_posted_at":"2026-10-01T16:06:54.258Z","bumped":true,"bumped_at":"2026-10-01T16:06:54.258Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\no\tAdd a consistent, explicit SIEM variable for the originating domain controller or agent across Active Directory threat alerts, including Golden Ticket. \nPlease de&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":159,"name":"ideas","slug":"ideas"},{"id":135,"name":"new","slug":"new"}],"tags_descriptions":{"new":"The idea was just submitted and hasn’t been reviewed by the team yet."},"views":11,"like_count":0,"has_summary":false,"last_poster_username":"s_pellerin","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Requesting a consistent SIEM variable that reliably reports the originating domain controller/agent hostname for all relevant Active Directory threat alerts (not just Golden Ticket), since the current %ORIGINATING_SERVER% field is inconsistent and forces manual UI or log lookups for faster triage and correlation.","has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":39724,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Threat Manager 3.3.158 Patch Version Released","fancy_title_localized":false,"locale":"en","id":155393,"title":"Threat Manager 3.3.158 Patch Version Released","slug":"threat-manager-3-3-158-patch-version-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_1024x512.jpeg","created_at":"2026-09-17T12:24:46.191Z","last_posted_at":"2026-09-17T12:24:46.191Z","bumped":false,"bumped_at":"2026-09-17T12:24:46.191Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload Netwrix Threat Manager 3.3.158 here! \n\n\nBug Fixes and Miscellaneous Updates\nSecurity\n\nUpdated front-end third party dependencies\nUpdated OpenSSL to version&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/7/765c02ac5f34bf268901b0c661e59b6bb39f4248_2_200x100.jpeg"}],"tags":[{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":31,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager 3.3.158 has been released, including updated third-party dependencies and security components plus fixes for login errors post-upgrade, tag details layout/text wrapping, password reset/login issues from older accounts, and event display/search for non-synced Azure users.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Threat Manager 3.2.199 Patch Version Released","fancy_title_localized":false,"locale":"en","id":155377,"title":"Threat Manager 3.2.199 Patch Version Released","slug":"threat-manager-3-2-199-patch-version-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_1024x512.jpeg","created_at":"2026-09-17T12:24:46.163Z","last_posted_at":"2026-09-17T12:24:46.163Z","bumped":false,"bumped_at":"2026-09-17T12:24:46.163Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload Netwrix Threat Manager 3.2.199 here! \n\n\nBug Fixes and Miscellaneous Updates\nSecurity\n\nUpdated front-end third party dependencies\nUpdated OpenSSL to version&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/f/feb56110c1375051119faa2a76076a3e335543a4.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/feb56110c1375051119faa2a76076a3e335543a4_2_200x100.jpeg"}],"tags":[{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":20,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager 3.2.199 patch has been released, including bug fixes and security updates with refreshed front-end dependencies plus upgraded OpenSSL (4.0.2), .NET (10.0.10), and PostgreSQL (14.24.2/18.6.3).","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Agent Packages for Microsoft KB Update (September, 8 2026) Released","fancy_title_localized":false,"locale":"en","id":154717,"title":"Agent Packages for Microsoft KB Update (September, 8 2026) Released","slug":"agent-packages-for-microsoft-kb-update-september-8-2026-released","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg","created_at":"2026-09-10T17:11:28.073Z","last_posted_at":"2026-09-15T14:16:12.569Z","bumped":true,"bumped_at":"2026-09-15T14:16:12.569Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload updated agent packages here! \n\n\nBug Fixes and Miscellaneous Updates\nOn September 8th, 2026 Microsoft distributed KBs that conflict with existing Netwrix Th&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_200x100.jpeg"}],"tags":[{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":81,"like_count":2,"has_summary":false,"last_poster_username":"sarumugam","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix released updated Threat Prevention agent packages to avoid conflicts with Microsoft KBs from Sept 8, 2026, and users confirmed that agent version 7.5.0.317 is available for download from both the Customer Portal and the NTP console.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":99,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":3,"primary_group_id":42,"flair_group_id":42},{"extras":"latest","description":"Most Recent Poster","user_id":3536,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Microsoft KB Update (September 8, 2026) – Medium Severity","fancy_title_localized":false,"locale":"en","id":149671,"title":"Microsoft KB Update (September 8, 2026) – Medium Severity","slug":"microsoft-kb-update-september-8-2026-medium-severity","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_1024x512.jpeg","created_at":"2026-09-08T17:00:27.264Z","last_posted_at":"2026-09-08T17:00:27.264Z","bumped":false,"bumped_at":"2026-09-08T17:00:27.264Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\nOn September 8, 2026 Microsoft released KB updates that conflict with Netwrix Threat Prevention (formerly StealthINTERCEPT) agents used by Threat Manager for AD to co&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/8/8b0960a232af17bf8c5d69778ab01272f2b29f29_2_200x100.jpeg"}],"tags":[{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":100,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft’s Sept 8, 2026 KB updates (KB5122871/2882/3099/3066) conflict with Netwrix Threat Prevention agents for AD, potentially preventing Kerberos, AD replication, NTLM, and RDP authentication event collection/blocking unless agents are updated; Netwrix advises delaying deployment until compatible agents are released.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Threat Manager Patch Version 3.2.195 Released","fancy_title_localized":false,"locale":"en","id":140398,"title":"Threat Manager Patch Version 3.2.195 Released","slug":"threat-manager-patch-version-3-2-195-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_1024x512.jpeg","created_at":"2026-08-18T17:16:01.075Z","last_posted_at":"2026-08-18T17:16:01.075Z","bumped":false,"bumped_at":"2026-08-18T17:16:01.075Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload Netwrix Threat Manager 3.2.195 here! \n\n\nBug Fixes and Miscellaneous Updates\nEnhancements\n\nADCS filters added to Threat Prevention investigations for more p&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/b/b6027eaabc6d9440527efd4eec68eceb4f18f842_2_200x100.jpeg"}],"tags":[{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":56,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager patch 3.2.195 was released with bug fixes and enhancements across threat prevention investigations, authentication, identity sync, service account auditing, and platform issues, including PostgreSQL and crash/server-error resolutions and improved filtering behavior.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Netwrix Threat Manager Version 3.3 Released","fancy_title_localized":false,"locale":"en","id":137312,"title":"Netwrix Threat Manager Version 3.3 Released","slug":"netwrix-threat-manager-version-3-3-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_1024x512.jpeg","created_at":"2026-08-18T17:16:01.047Z","last_posted_at":"2026-08-18T17:16:01.047Z","bumped":false,"bumped_at":"2026-08-18T17:16:01.047Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"This release tackles two blind spots that have been quietly growing in hybrid environments — AI agent identities and cloud file activity — giving your security team a clearer, more complete view of what’s happening &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/4/4e80a00246e5d8853cf4485e9619c1f110f04bbe_2_200x100.jpeg"}],"tags":[{"id":110,"name":"release-minor","slug":"release-minor"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":122,"like_count":1,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":1,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager 3.3 adds visibility for Microsoft Entra AI agent identities and integrates Azure Files activity into investigations, along with service-account tagging and Impossible Travel noise-reduction enhancements plus multiple bug fixes and upgrade guidance.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"SIEM templates - NTM","fancy_title_localized":false,"locale":"en","id":135574,"title":"SIEM templates - NTM","slug":"siem-templates-ntm","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/1/179df356920bb5ca1721cb3dca72b4bc6573d6bf.png","created_at":"2026-07-16T12:45:47.324Z","last_posted_at":"2026-07-16T17:50:22.465Z","bumped":true,"bumped_at":"2026-07-16T17:50:22.465Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I’m curious if there’s any documentation on the formats of the various flavors of CEF templates I see in our SIEM integration page.  I see this \n  \nHowever, none of them (with the exception of the Custom one) actually sh&hellip;","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":201,"height":244,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/1/179df356920bb5ca1721cb3dca72b4bc6573d6bf.png"},{"max_width":200,"max_height":200,"width":164,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/179df356920bb5ca1721cb3dca72b4bc6573d6bf_2_164x200.png"}],"tags":[{"id":418,"name":"siem","slug":"siem"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":52,"like_count":1,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":157,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"SIEM CEF template documentation was clarified: all four templates share identical CEF header/body fields and structure, differing only in the timestamp/host prefix before `CEF:0`, and guidance was provided on which template to use for different SIEM/log collector timestamp expectations.","has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":552,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":97,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"NTM - Stale tag","fancy_title_localized":false,"locale":"en","id":135588,"title":"NTM - Stale tag","slug":"ntm-stale-tag","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2026-07-16T14:19:34.747Z","last_posted_at":"2026-07-16T17:23:16.104Z","bumped":true,"bumped_at":"2026-07-16T17:23:16.104Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I see that Stale is a built-in tag in NTM but I don’t see how that is defined nor can I find data that we can export to show why it is tagged that way.  Is this defined anywhere for NTM? \nThanks!","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":692,"name":"tags","slug":"tags"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":58,"like_count":1,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":157,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"NTM’s built-in “stale” tag is automatically set during AD Sync when an account’s Last Logon Timestamp exceeds 30 days, and the team has logged enhancement requests to display the last login date and allow configurable stale-day thresholds.","has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":552,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":97,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Agent Packages for Microsoft KB Update (July 14, 2026) Released","fancy_title_localized":false,"locale":"en","id":135521,"title":"Agent Packages for Microsoft KB Update (July 14, 2026) Released","slug":"agent-packages-for-microsoft-kb-update-july-14-2026-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg","created_at":"2026-07-16T17:00:24.083Z","last_posted_at":"2026-07-16T17:00:24.083Z","bumped":false,"bumped_at":"2026-07-16T17:00:24.083Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload updated agent packages here! \n\n\nBug Fixes and Miscellaneous Updates\nOn July 14, 2026 Microsoft distributed KBs that conflict with existing Netwrix Threat P&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_200x100.jpeg"}],"tags":[{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":76,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft KBs released July 14, 2026 conflict with existing Netwrix Threat Prevention agents, prompting Netwrix to provide updated agent packages (builds 7.5.0.310 and 8.0.0.79) and instructions to upgrade only the agents for compatibility.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Microsoft KB Update (July 14, 2026) – Medium Severity","fancy_title_localized":false,"locale":"en","id":135418,"title":"Microsoft KB Update (July 14, 2026) – Medium Severity","slug":"microsoft-kb-update-july-14-2026-medium-severity","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_1024x512.jpeg","created_at":"2026-07-14T18:30:44.068Z","last_posted_at":"2026-07-14T18:30:44.068Z","bumped":false,"bumped_at":"2026-07-14T18:30:44.068Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\nOn July 14, 2026, Microsoft released KB updates that conflict with Netwrix Threat Prevention (formerly StealthINTERCEPT) agents used by Threat Manager for AD to colle&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c218bedadb81d295d7738c6011cb9c5517d625ef_2_200x100.jpeg"}],"tags":[{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":182,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft’s July 14, 2026 KBs (KB5099536/5099540/KB5099538/KB5099535) conflict with Netwrix Threat Prevention/Threat Manager AD agents, causing impacted NTLM/Kerberos authentication events to stop being captured or blocked if KBs are installed before agent updates; Netwrix recommends delaying deployment until compatible agents are released.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Agent Packages for Microsoft KB Update (June 9, 2026) Released","fancy_title_localized":false,"locale":"en","id":132910,"title":"Agent Packages for Microsoft KB Update (June 9, 2026) Released","slug":"agent-packages-for-microsoft-kb-update-june-9-2026-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg","created_at":"2026-06-15T12:00:06.040Z","last_posted_at":"2026-06-15T12:00:06.040Z","bumped":false,"bumped_at":"2026-06-15T12:00:06.040Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload updated agent packages here! \n\n\nBug Fixes and Miscellaneous Updates\nOn May 12, 2026 Microsoft distributed KBs that conflict with existing Netwrix Threat Pr&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_200x100.jpeg"}],"tags":[{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":82,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix released updated Threat Prevention agent packages to resolve conflicts with newly released Microsoft KBs, providing agent builds 7.4.0.303, 7.5.0.304, and 8.0.0.71 and advising users to upgrade agents for compatibility while Threat Manager installation remains unchanged.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Microsoft KB Update (June 9, 2026) – Medium Severity","fancy_title_localized":false,"locale":"en","id":132509,"title":"Microsoft KB Update (June 9, 2026) – Medium Severity","slug":"microsoft-kb-update-june-9-2026-medium-severity","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_1024x512.jpeg","created_at":"2026-06-09T17:00:54.805Z","last_posted_at":"2026-06-09T17:00:54.805Z","bumped":false,"bumped_at":"2026-06-09T17:00:54.805Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\nOn June 9, 2026, Microsoft released KB updates that conflict with Netwrix Threat Prevention  agents used by Threat Manager for AD to collect AD event data. If these K&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/1/1cf529fc22f12b473915e190e22026cbf235298e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/1/1cf529fc22f12b473915e190e22026cbf235298e_2_200x100.jpeg"}],"tags":[{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":229,"name":"product-update","slug":"product-update"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":217,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft released June 9, 2026 KB updates that conflict with Netwrix Threat Prevention agents for Threat Manager for AD, potentially preventing capture/blocking of Kerberos Authentication and LDAP Bind events if applied before updating agents, with Netwrix recommending delayed deployment.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"NTM database maintenance","fancy_title_localized":false,"locale":"en","id":131667,"title":"NTM database maintenance","slug":"ntm-database-maintenance","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-05-27T18:34:33.235Z","last_posted_at":"2026-06-02T20:04:32.056Z","bumped":true,"bumped_at":"2026-06-02T20:04:32.056Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Greetings all, \nJust completed our upgrade of NTM from 3.0 to 3.2.  My only issue is that it took 18 hours to complete.  This got me thinking that our settings for database maintenance might not be ideal.  I would very m&hellip;","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":358,"name":"database","slug":"database"},{"id":279,"name":"postgresql","slug":"postgresql"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":47,"like_count":1,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":157,"op_like_count":1,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"After upgrading NTM 3.0 to 3.2 taking 18 hours, users discussed database maintenance, with a recommendation to store longer-term data in NTP’s SQL database and keep NTM retention tight (7 days default), since lowering retention reduces event volume and speeds migration work needed for future PG14→PG18 upgrades.","has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":552,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":97,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Netwrix Threat Manager 3.2 Released","fancy_title_localized":false,"locale":"en","id":130061,"title":"Netwrix Threat Manager 3.2 Released","slug":"netwrix-threat-manager-3-2-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_1024x512.jpeg","created_at":"2026-05-14T17:31:31.295Z","last_posted_at":"2026-05-14T17:31:31.295Z","bumped":false,"bumped_at":"2026-05-14T17:31:31.295Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Active Directory Certificate Services has become one of the most exploited attack surfaces in enterprise environments. Netwrix Threat Manager 3.2 extends our AD CS coverage from real-time blocking in Threat Preventi&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/3/3c617679fe4af0a653469cffcccd7c2db8727167_2_200x100.jpeg"}],"tags":[{"id":105,"name":"announcement","slug":"announcement"},{"id":110,"name":"release-minor","slug":"release-minor"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":200,"like_count":1,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":1,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager 3.2 enhances Active Directory Certificate Services detection by identifying ESC1, ESC3, ESC4, ESC7, and CA private key extraction risks, while introducing an improved Service Accounts Dashboard for better visibility into non-human identity risks.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Agent Packages for Microsoft KB Update (May 12, 2026) Released","fancy_title_localized":false,"locale":"en","id":130809,"title":"Agent Packages for Microsoft KB Update (May 12, 2026) Released","slug":"agent-packages-for-microsoft-kb-update-may-12-2026-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg","created_at":"2026-05-14T17:00:39.619Z","last_posted_at":"2026-05-14T17:00:39.619Z","bumped":false,"bumped_at":"2026-05-14T17:00:39.619Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload updated agent packages here! \n\n\nBug Fixes and Miscellaneous Updates\nOn May 12, 2026 Microsoft distributed KBs that conflict with existing Netwrix Threat Pr&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1920,"height":960,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_1024x512.jpeg"},{"max_width":800,"max_height":800,"width":800,"height":400,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_800x400.jpeg"},{"max_width":600,"max_height":600,"width":600,"height":300,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_600x300.jpeg"},{"max_width":400,"max_height":400,"width":400,"height":200,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_400x200.jpeg"},{"max_width":300,"max_height":300,"width":300,"height":150,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_300x150.jpeg"},{"max_width":200,"max_height":200,"width":200,"height":100,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/9/93d77cdeee68f9bcb7f88229f51b16daa52edd7d_2_200x100.jpeg"}],"tags":[{"id":105,"name":"announcement","slug":"announcement"},{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":61,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix released updated Threat Prevention agent packages to resolve conflicts with Microsoft KB updates from May 12, 2026. Users must upgrade their agents to versions 8.0.0.62, 7.5.0.297, or 7.4.0.297 to maintain compatibility with Threat Manager.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Allow non-admin users to switch investigation source (NTP vs NTM)","fancy_title_localized":false,"locale":"en","id":128431,"title":"Allow non-admin users to switch investigation source (NTP vs NTM)","slug":"allow-non-admin-users-to-switch-investigation-source-ntp-vs-ntm","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":null,"created_at":"2026-04-16T21:37:31.702Z","last_posted_at":"2026-05-14T13:11:48.363Z","bumped":true,"bumped_at":"2026-05-14T13:11:48.363Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nEnable role-based permission for non-admin users to switch between NTP and NTM data sources during investigations. \nPlease describe your idea in detail. What is you&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":137,"name":"completed","slug":"completed"},{"id":159,"name":"ideas","slug":"ideas"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":78,"like_count":0,"has_summary":false,"last_poster_username":"Maciek","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Maciek clarified that the feature request involves switching from NTM to NTP databases for both out-of-the-box and custom investigations, a read-only action currently restricted to administrators, which necessitates the proposed role-based permission.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":2,"has_accepted_answer":false,"vote_count":2,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":3969,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Microsoft KB Update (May 12, 2026) – Medium Severity","fancy_title_localized":false,"locale":"en","id":130513,"title":"Microsoft KB Update (May 12, 2026) – Medium Severity","slug":"microsoft-kb-update-may-12-2026-medium-severity","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf.png","created_at":"2026-05-12T17:00:27.415Z","last_posted_at":"2026-05-12T17:00:27.415Z","bumped":false,"bumped_at":"2026-05-12T17:00:27.415Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\nOn May 12th, 2026, Microsoft released KB updates that conflict with Netwrix Threat Prevention agents used by Threat Manager for AD to collect AD event data. If these &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1000,"height":600,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf.png"},{"max_width":800,"max_height":800,"width":800,"height":480,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf_2_800x480.png"},{"max_width":600,"max_height":600,"width":600,"height":360,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf_2_600x360.png"},{"max_width":400,"max_height":400,"width":400,"height":240,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf_2_400x240.png"},{"max_width":300,"max_height":300,"width":300,"height":180,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf_2_300x180.png"},{"max_width":200,"max_height":200,"width":200,"height":120,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/c/c016fcd549374e3a853261c81a031a2f36c530bf_2_200x120.png"}],"tags":[{"id":105,"name":"announcement","slug":"announcement"},{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":141,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft KB updates from May 12, 2026, conflict with Netwrix Threat Prevention agents, preventing the capture or blocking of specific Kerberos and NTLM events. Netwrix advises delaying these updates until compatible agents are released, though deployment without immediate agent updates poses no stability risk to domain controllers.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Alert Exclusion request - Impossible Travel","fancy_title_localized":false,"locale":"en","id":129301,"title":"Alert Exclusion request - Impossible Travel","slug":"alert-exclusion-request-impossible-travel","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-04-22T14:57:29.181Z","last_posted_at":"2026-05-05T19:38:57.335Z","bumped":true,"bumped_at":"2026-05-05T19:38:57.335Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nExcluding impossible travel alerts based on the user and country or city. \nPlease describe your idea in detail. What is your problem, why do you feel this idea is t&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":137,"name":"completed","slug":"completed"},{"id":159,"name":"ideas","slug":"ideas"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":53,"like_count":0,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Erick Nava requests excluding impossible travel alerts for remote workers, prompting Kevin Joyce to clarify whether the solution requires a global pre-approved location setting or specific user-to-location alignment.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":2,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":null,"description":"Original Poster","user_id":13006,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"PostgreSQL vulnerabilities","fancy_title_localized":false,"locale":"en","id":123825,"title":"PostgreSQL vulnerabilities","slug":"postgresql-vulnerabilities","posts_count":10,"reply_count":5,"highest_post_number":10,"image_url":null,"created_at":"2026-03-03T13:27:17.679Z","last_posted_at":"2026-05-05T17:13:22.133Z","bumped":true,"bumped_at":"2026-05-05T17:13:22.133Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"We are being told by our vulnerability scanning group at our version of PostgreSQL are at risk.  As per this advisory - https://www.postgresql.org/about/news/postgresql-182-178-1612-1516-and-1421-released-3235/ , they ar&hellip;","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":279,"name":"postgresql","slug":"postgresql"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":181,"like_count":3,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":157,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager plans to update its bundled PostgreSQL to 14.22 before May (and release 3.2 on May 14 with the updated PG14 plus optional PG18 migration), after an unexpected PG14.22 patch-install scenario was resolved and guidance was given on interim EDB-based updates.","has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":552,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":97,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Added tag selection flexibility in investigation builder","fancy_title_localized":false,"locale":"en","id":129935,"title":"Added tag selection flexibility in investigation builder","slug":"added-tag-selection-flexibility-in-investigation-builder","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-05-01T15:15:19.309Z","last_posted_at":"2026-05-01T15:15:19.572Z","bumped":true,"bumped_at":"2026-05-01T15:15:19.572Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nAllow a tag to be selected across different relevant filter types \nPlease describe your idea in detail. What is your problem, why do you feel this idea is the best &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":159,"name":"ideas","slug":"ideas"},{"id":135,"name":"new","slug":"new"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{"new":"The idea was just submitted and hasn’t been reviewed by the team yet."},"views":23,"like_count":0,"has_summary":false,"last_poster_username":"DevonAnderson","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"The investigation builder now supports selecting tags across different filter types, enabling fine-tuned investigations by specifying tag members like Target or Client instead of manually listing individual hosts.","has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":314,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Password rotation","fancy_title_localized":false,"locale":"en","id":123447,"title":"Password rotation","slug":"password-rotation","posts_count":5,"reply_count":1,"highest_post_number":7,"image_url":null,"created_at":"2026-02-24T16:33:00.078Z","last_posted_at":"2026-04-28T20:03:01.893Z","bumped":true,"bumped_at":"2026-04-28T20:03:01.893Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"We use a service account for both NTP and NTM that has to have a password rotation every 365 days.  For NTP, it’s simple where we stop the service, change the password, update the service and restart to  prevent any bad &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":12,"name":"password-management","slug":"password-management"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":88,"like_count":2,"has_summary":false,"last_poster_username":"derek.putnam","category_id":157,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"The discussion addresses the challenge of rotating passwords for a service account used by NTM, specifically seeking best practices for stopping services while maintaining web interface access to update credentials.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":552,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":616,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":3,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"NTM Reporting Module - request wildcard search capability under Investigate &gt; Run Query","fancy_title_localized":false,"locale":"en","id":127843,"title":"NTM Reporting Module - request wildcard search capability under Investigate > Run Query","slug":"ntm-reporting-module-request-wildcard-search-capability-under-investigate-run-query","posts_count":7,"reply_count":3,"highest_post_number":7,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_1024x558.png","created_at":"2026-04-07T20:22:29.804Z","last_posted_at":"2026-04-22T19:31:51.888Z","bumped":true,"bumped_at":"2026-04-22T19:31:51.888Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nIn the NTM Reporting Module we want the ability to conduct a wildcard search under Investigate &gt; Run Query. \nPlease describe your idea in detail. What is your probl&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1387,"height":757,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/5/53374343a6af631c2422dbb950e60b7708f42508.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":558,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_1024x558.png"},{"max_width":800,"max_height":800,"width":800,"height":436,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_800x436.png"},{"max_width":600,"max_height":600,"width":600,"height":327,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_600x327.png"},{"max_width":400,"max_height":400,"width":400,"height":218,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_400x218.png"},{"max_width":300,"max_height":300,"width":300,"height":163,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_300x163.png"},{"max_width":200,"max_height":200,"width":200,"height":109,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/5/53374343a6af631c2422dbb950e60b7708f42508_2_200x109.png"}],"tags":[{"id":137,"name":"completed","slug":"completed"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":110,"like_count":7,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Development confirmed that wildcard search capability will be added to the NTM Reporting Module, allowing custom values in the Investigate > Run Query section, with the feature expected in the 3.2 release.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":3,"has_accepted_answer":false,"vote_count":2,"can_vote":true,"user_voted":null,"posters":[{"extras":null,"description":"Original Poster","user_id":307,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":616,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Include pre-created playbook for sending email alerts containing pertinent threat variables","fancy_title_localized":false,"locale":"en","id":128494,"title":"Include pre-created playbook for sending email alerts containing pertinent threat variables","slug":"include-pre-created-playbook-for-sending-email-alerts-containing-pertinent-threat-variables","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-04-17T19:10:58.234Z","last_posted_at":"2026-04-17T19:10:58.416Z","bumped":true,"bumped_at":"2026-04-17T19:10:58.416Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nAdd pre-created and usable threat response playbook for customers to immediately get value with. \nPlease describe your idea in detail. What is your problem, why do &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":237,"name":"alerts","slug":"alerts"},{"id":159,"name":"ideas","slug":"ideas"},{"id":135,"name":"new","slug":"new"},{"id":200,"name":"playbooks","slug":"playbooks"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{"new":"The idea was just submitted and hasn’t been reviewed by the team yet."},"views":30,"like_count":0,"has_summary":false,"last_poster_username":"DevonAnderson","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"A user requests a pre-created, ready-to-use playbook for sending email alerts with threat variables to reduce the manual effort and technical expertise currently required for configuration.","has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":314,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Agent Packages for Microsoft KB Update (April 14, 2026) Released","fancy_title_localized":false,"locale":"en","id":128341,"title":"Agent Packages for Microsoft KB Update (April 14, 2026) Released","slug":"agent-packages-for-microsoft-kb-update-april-14-2026-released","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/2/216992d621709b143695bada3f55f124ce6b89f0.png","created_at":"2026-04-16T12:00:15.810Z","last_posted_at":"2026-04-16T12:00:15.810Z","bumped":false,"bumped_at":"2026-04-16T12:00:15.810Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\n\n\nDownload updated agent packages here! \n\n\nBug Fixes and Miscellaneous Updates\nOn March 10, 2026 Microsoft distributed KBs that conflict with existing Netwrix Threat &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1000,"height":600,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/2/216992d621709b143695bada3f55f124ce6b89f0.png"},{"max_width":800,"max_height":800,"width":800,"height":480,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/2/216992d621709b143695bada3f55f124ce6b89f0_2_800x480.png"},{"max_width":600,"max_height":600,"width":600,"height":360,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/2/216992d621709b143695bada3f55f124ce6b89f0_2_600x360.png"},{"max_width":400,"max_height":400,"width":400,"height":240,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/2/216992d621709b143695bada3f55f124ce6b89f0_2_400x240.png"},{"max_width":300,"max_height":300,"width":300,"height":180,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/2/216992d621709b143695bada3f55f124ce6b89f0_2_300x180.png"},{"max_width":200,"max_height":200,"width":200,"height":120,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/2/216992d621709b143695bada3f55f124ce6b89f0_2_200x120.png"}],"tags":[{"id":105,"name":"announcement","slug":"announcement"},{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":111,"name":"release-patch","slug":"release-patch"},{"id":246,"name":"threat-prevention-agents","slug":"threat-prevention-agents"}],"tags_descriptions":{},"views":82,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix has released updated Threat Prevention agent packages (versions 8.0.0.54, 7.5.0.292, and 7.4.0.295) to resolve conflicts with Microsoft KB updates from March 10, 2026.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Ability to define service accounts (e.g. by OU or naming convention)","fancy_title_localized":false,"locale":"en","id":127838,"title":"Ability to define service accounts (e.g. by OU or naming convention)","slug":"ability-to-define-service-accounts-e-g-by-ou-or-naming-convention","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-04-07T19:27:09.994Z","last_posted_at":"2026-04-15T22:05:41.769Z","bumped":true,"bumped_at":"2026-04-15T22:05:41.769Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nAbility to define service accounts based on organizational units or naming conventions instead of relying solely on machine learning detection. \nPlease describe you&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":137,"name":"completed","slug":"completed"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":63,"like_count":1,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"The product team confirmed plans to implement manual service account definition via OU or naming conventions at the AD Sync layer, with development scheduled for Q2 to complement existing ML detection.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":2,"has_accepted_answer":false,"vote_count":2,"can_vote":true,"user_voted":null,"posters":[{"extras":null,"description":"Original Poster","user_id":3969,"primary_group_id":42,"flair_group_id":42},{"extras":"latest","description":"Most Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Prevent reuse of admin passwords","fancy_title_localized":false,"locale":"en","id":127836,"title":"Prevent reuse of admin passwords","slug":"prevent-reuse-of-admin-passwords","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-04-07T19:04:36.669Z","last_posted_at":"2026-04-15T20:15:48.461Z","bumped":true,"bumped_at":"2026-04-15T20:15:48.461Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nEnsure administrators cannot reuse previously used passwords when resetting credentials. \nPlease describe your idea in detail. What is your problem, why do you feel&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":137,"name":"completed","slug":"completed"},{"id":159,"name":"ideas","slug":"ideas"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":74,"like_count":1,"has_summary":false,"last_poster_username":"Maciek","category_id":159,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"The team confirmed implementation of password history checks to prevent admin credential reuse, likely retaining at least five passwords per NIST standards, with delivery expected in Q2.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":2,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":3969,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Option to clean up / automatically remove decommissioned agents from System Health","fancy_title_localized":false,"locale":"en","id":127839,"title":"Option to clean up / automatically remove decommissioned agents from System Health","slug":"option-to-clean-up-automatically-remove-decommissioned-agents-from-system-health","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-04-07T19:31:36.462Z","last_posted_at":"2026-04-15T19:55:24.897Z","bumped":true,"bumped_at":"2026-04-15T19:55:24.897Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"What is a one sentence summary of your feature request?\nAbility to automatically clean up or remove decommissioned agents from the System Health view to maintain accuracy and reduce noise. \nPlease describe your idea in d&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":137,"name":"completed","slug":"completed"},{"id":159,"name":"ideas","slug":"ideas"}],"tags_descriptions":{"completed":"The idea has been fully implemented and released."},"views":72,"like_count":2,"has_summary":false,"last_poster_username":"Maciek","category_id":159,"op_like_count":1,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"The vendor confirmed a Q2 release for automatically hiding decommissioned agents from System Health after seven days of inactivity to reduce clutter.","expert_post_group_names":["pm_threat_manager"],"first_expert_post_id":2,"has_accepted_answer":false,"vote_count":2,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":3969,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Microsoft KB Update (April 14, 2026) – Medium Severity","fancy_title_localized":false,"locale":"en","id":128142,"title":"Microsoft KB Update (April 14, 2026) – Medium Severity","slug":"microsoft-kb-update-april-14-2026-medium-severity","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f.png","created_at":"2026-04-14T17:00:30.074Z","last_posted_at":"2026-04-14T17:00:30.074Z","bumped":false,"bumped_at":"2026-04-14T17:00:30.074Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Want the full details? Click the link below! \n\n\nOn April 14th 2026, Microsoft released KB updates that conflict with Netwrix Threat Prevention (formerly StealthINTERCEPT) agents used by Threat Manager for AD to col&hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1000,"height":600,"url":"https://netwrix1.discourse-cdn.com/netwrix/original/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f.png"},{"max_width":800,"max_height":800,"width":800,"height":480,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f_2_800x480.png"},{"max_width":600,"max_height":600,"width":600,"height":360,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f_2_600x360.png"},{"max_width":400,"max_height":400,"width":400,"height":240,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f_2_400x240.png"},{"max_width":300,"max_height":300,"width":300,"height":180,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f_2_300x180.png"},{"max_width":200,"max_height":200,"width":200,"height":120,"url":"https://netwrix1.discourse-cdn.com/netwrix/optimized/2X/f/f6651178c00b50c98de5126f630f8a7f367aae0f_2_200x120.png"}],"tags":[{"id":105,"name":"announcement","slug":"announcement"},{"id":287,"name":"patch-tuesday","slug":"patch-tuesday"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":282,"like_count":0,"has_summary":false,"last_poster_username":"Tania.Severina","category_id":162,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Microsoft's April 14, 2026 updates conflict with Netwrix Threat Prevention agents, blocking Kerberos and LDAP event capture on affected Windows Server versions until compatible agents are released.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":99,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Learning Lab: Understanding and Tuning Threats in Netwrix Threat Manager","fancy_title_localized":false,"locale":"en","id":125816,"title":"Learning Lab: Understanding and Tuning Threats in Netwrix Threat Manager","slug":"learning-lab-understanding-and-tuning-threats-in-netwrix-threat-manager","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-19T15:48:40.689Z","last_posted_at":"2026-03-19T15:48:40.801Z","bumped":true,"bumped_at":"2026-03-19T15:48:40.801Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":":spiral_calendar: This Learning Lab occurred March 10, 2026 (UTC). To see any upcoming events in the community, check out <span class=\"hashtag-icon-placeholder\"></span>Community &gt; Events</span>! \n\nAbout the session\nJoin us as we take a practical look at noisy threats and &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":272,"name":"learning-lab","slug":"learning-lab"},{"id":7,"name":"threat-manager","slug":"threat-manager"}],"tags_descriptions":{},"views":40,"like_count":0,"has_summary":false,"last_poster_username":"kevin.joyce","category_id":158,"op_like_count":0,"pinned_globally":false,"featured_link":null,"ai_topic_gist":"Netwrix Threat Manager offers a session on identifying noisy threats and false positives caused by legacy protocols and incomplete identity context, while providing strategies to tune detections responsibly.","has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":97,"primary_group_id":42,"flair_group_id":42}]}]}}