We are excited to announce the availability of 2025.5 with extended functionality for Helix Connect.
2025.5 enhances the analyst experience in accessing alert, event and asset details reducing the mean time to investigate and respond.
-
Enhanced Timeline View: Reconstruct entire attack sequences across vectors with filterable timeline cards, key artifacts for faster analysis and much more.
-
Alert Details Enhanced: The Summary tab on the alert details page shows key contextual information about how the alert was triggered, what assets in your environment are affected, and what action you should take to remediate the alert.
-
Smarter Search Pivot: Every field in alert details now offers contextual actions enabling one-click search.
-
Start a Search from Anywhere: You can start a search for events from any page in Helix, without losing the page you were on.
-
Search Enhancements: Customize search result columns, save your own column sets, and toggle between parsed and raw field views all on the same page. Use TimeWrinkle pattern hunting to search a period of time around an event of interest to see if other alerts or events were detected.
-
Hyperautomation: - Add Hyperautomation to your Alert workflow to execute no-code sequences of SOAR actions to investigate and mitigate incidents using integrated products and services. Hyperautomation is currently available for Trellix-IAM tenants on a trial basis upon request. Customers using F-IAM are required to migrate to Trellix-IAM.
-
Grouped Alerts: Hundreds of discrete alerts on the alerts list page are now consolidated into single, correlated multi-vector alerts, cutting through noise to highlight what matters most, with one-click side panel summaries.
-
Rich Alerts & Case Notes: Format notes with markdown support and upload images directly to cases for better documentation and collaboration.
- Configurable Session Timeout: Session timeouts can now be aligned with your security policies and analyst workflow needs, preventing interruptions during critical investigations.
Explore these features in Alerts New and Search New and let us know how they're improving your team's workflow.
Your feedback shapes what we build next!
You can find more information about Helix Connect in our Product Guide and Release Notes.
Note: To receive information about product updates, sign up for the Support Notification Service.
For instructions, see the Thrive Portal User Guide and navigate to Profile and Settings > My Settings > Manage Support Notification Services (SNS) subscription preferences.