Positive Technologies has released MaxPatrol SIEM 28.0, a new version of its security monitoring system. Internal testing shows the update reduces CPU resource consumption by up to 26% and memory usage by up to 52% compared to the previous version.
The optimization of core components allows for higher performance on existing hardware. For instance, event processing capacity has doubled from 20,000 to 40,000 events per second on comparable resources. The new architecture also allows users to disable unused roles to free up server capacity.
The update introduces the HackTracker component to the MaxPatrol BAD behavioral analysis module, which identifies attackers based on behavior rather than specific tools. The module now also supports event analysis for Unix-based operating systems.
The PT Naira AI assistant is now available for integration, helping users create normalization rules and interpret security events. According to the company, this tool can reduce incident investigation time by up to 50% and decrease the labor required for rule creation by up to 90%.
The interface has been updated with a new navigation menu and native dark mode support. Additionally, correlation rule cards now provide extended context for analysts. Users can update to version 28.0 immediately.
