By Michael Cooney
Publication Date: 2026-03-23 21:37:00
Other new ES features include:
- Detection Studio: A unified workspace for detection engineers to plan, develop, test, deploy, and monitor detections. By mapping coverage against the MITRE ATT&CK framework, teams can identify data gaps and validate detection quality in real time. Another new instrument, Malware Threat Reversing Agent, gives customers insight into malware threats, providing summaries and step-by-step breakdowns of malicious scripts.
- Federated Search: Lets SecOps teams gain comprehensive visibility across distributed data sources, according to Cisco.
- Exposure Analytics: Automatically discovers assets and users across the environment. By leveraging data already being ingested, it provides a “Security Truth Layer” without the need for additional agents or tools, Cisco stated.
Cisco DefenseClaw
Cisco is also releasing an open-source secure agent framework called DefenseClaw that lets users define policy-based security, network, and privacy…




