[DarkIQ Triage Improvements]

New visibility into event vs detection dates, unified action views, and streamlined investigation panels with full action metadata.

Contact sales

To stay ahead of an attack, defenders need to know not just what was found, but when the exposure actually began. Today's update to DarkIQ supports faster discovery and remediation by giving you a more granular view of your external risk.

What's new

• [New] Event date:
  We've introduced Event Date to your triage workflow. This allows you to differentiate between the origin of a breach and the moment DarkIQ surfaced it.
• Actions details panel:
  No more multiple accordions. Now, clicking an action opens a unified side panel, with all action metadata collated into a single, easy-to-read table.
• Localized time:
  Hover over any action date to view the timestamp in UTC and your local time.
• Improved filter and sorting:
  Use the improved options to organize all your actions by event date.

Key benefits

Adding the event date and improving access to additional data in DarkIQ supports the preemptive prevention of exposures. For example, a six-month-old credential leak requires a different response than a six-minute-old exposure. By surfacing the Event Date across all table views, DarkIQ allows you to:

• Prioritize actions by dwell time.
• Reduce investigation times with one-click access to the action's metadata and localized timestamps.

Bio

Alex Blackman is the Head of Product Marketing at Searchlight Cyber, where he leads the go-to-market strategy for the company's Preemptive Threat Exposure Management suite. With over a decade of experience serving global brands like Unilever and Allianz, Alex focuses on bridging the gap between deep technical intelligence and strategic business value. He is the voice behind Searchlight's webinar series, helping MSSPs, enterprises, and public sector organizations identify threats before they become attacks.