Skip to content

SenseOn Platform: Apr 2025

The CrowdStrike, SentinelOne, Microsoft Defender for Endpoint and Sophos EDR connectors are now available, so you can bring their alerts into SenseOn and isolate a device through your EDR tool straight from a case. AI case summaries are out of beta. Times in the SenseOn Platform can now be shown in UTC as well as local or relative time, and every user can now see which Data Connectors are set up.

What's new

EDR connectors with device isolation

The CrowdStrike EDR, SentinelOne EDR, Microsoft Defender for Endpoint and Sophos EDR connectors in Data Connectors are now available. Each one brings alerts from your EDR tool into SenseOn so you can correlate them with the rest of your estate. From a case, you can isolate a device through the EDR tool that manages it. Add a comment when you isolate a device, see its isolation status in the case, and restore its connectivity when you're ready. A device's details in a case also show what your EDR tool knows about it. If a connector isn't part of your licence, it's labelled in the catalogue, and you can contact SenseOn to request access.

  • AI case summaries: case summaries are now generally available and no longer carry a Beta badge.
  • Time display: times anywhere in the SenseOn Platform can now be shown in UTC, as well as local or relative time. Click a time and choose from the menu. Case history uses the same time menu.

What's improved

  • Data Connectors: analysts and managers can now view the Data Connectors page. Only administrators can set up or change a connection, and a tooltip explains this to other users.
  • Knowledge Graph: the Find the parent process action finds the parent process in more cases, and now shows its command line too.
  • Digital Estate: Endpoint Protection now needs sensor version 6.8.3 or later, and devices on an older version are marked with a tooltip.

This round-up covers SenseOn Platform 4.38, 4.39, 4.40 and 4.41.