Product

Nebulog: What's New in Nebulock

Damien Lewke

Founder & CEO

Feb 9, 2026

On This Page

Welcome to Nebulog! This round up includes key product updates that strengthen your threat hunting capabilities. This month, we have a new Insights page with an insider threat component, cloud integrations, additional detection coverage, and more.

Insights Dashboard

We've released a new Insights dashboard that surfaces key hunting metrics for your organization. The dashboard includes:

Volume of signals generated in your environment and findings created from those signals
Deployed Detection Rules created by your team or Nebulock
New Detection Rules from Nebulock Hunters

Insider Threat Component

We added an insider threat component to Insights, starting with anomalous file creation detection. You can view per-host anomalous file creation events and expand the view for a graphical timeline analysis where the vertical bars are interactive.

Hunt from Findings

Users now have the ability to multithread hunts without losing context in a current hunt. When performing a hunt, you can pivot a new hunt with one click using the Hunt Finding button to investigate the finding further.

New Integrations

AWS CloudTrail

By integrating CloudTrail with Nebulock, you can hunt across endpoint, identity, and cloud telemetry to identify privilege escalation, persistence, and lateral movement. You can also pivot to writing behavioral detections across these data sources.

SIEM Egress Support

We've added an egress integration with Microsoft Sentinel giving you flexibility in how you route detections and findings to your existing security stack.

More details on these integrations and our full list of integrations are here.

Detection Coverage Expansion

Detection coverage now extends to IAM and cloud telemetry. You can write behavioral detections across your entire environment, from CrowdStrike endpoints to AWS CloudTrail and Microsoft Entra ID.

SOC 2 Type II

In case you missed it, we recently completed our SOC 2 Type II audit with our report. Security remains fundamental to how we build Nebulock and deliver agentic threat hunting to our customers. Visit our Trust Center for more on our security approach.

October 5, 2026

Nebulog: Detection improvements, open source release, and role-based access control

Track why every detection changed, reuse one list across every rule, and scope platform access by role with Nebulock's September 2026 platform releases.

Company

September 28, 2026

The GATES Method: when a hunt becomes a detection

GATES is a five-gate checklist for turning threat hunt findings into detections. Pressure-tested against 350 hunts and shipping as a /skill in the ATHF repo.

Research

September 24, 2026

When Your Insider Risk Program is Put to the Test

A fully-mature security stack missed real insider risk activity during a restructuring, until one Nebulock hunt caught data exfiltration happening in real-time.

Product

Hunt-first security

For what your alerts can't see.

Get a Demo