New Features & Improvements. AIR Console. MITRE ATT&CK Rules Download Optimization and Resilience.
What's New? Advanced Time Display and Copy Options – The DateTime component within AIR Console now allows analysts to view and copy timestamps in multiple formats including UTC, ISO, local, and relative time.
When a security incident strikes, time is everything. The faster you can scope, contain, and investigate, the less impact it has on your business. Gartner states that digital forensics and incident response retainer services augment capacity and capability when responding to cybersecurity incidents.
Scaling Incident Response services is a challenge. Customers expect speed, readiness, and proactive support but talent is scarce and expectations keep rising. Gartner Market Guide for Digital Forensics and Incident Response (DFIR) Retainer Services (July 2025) should be used to understand the DFIR market, evaluate trends, refine requirements and identify market players., but I feel, it’s just as valuable for service providers.
What CISOs Expect From Investigations in 2026: Speed, Clarity, Proof. Cyberattacks aren’t a “risk” anymore. They’re an operating condition. In The State of Cybersecurity Investigations 2026 Report, 84% of CISOs say a successful cyberattack is “inevitable.”
What's New? Google Cloud Storage support – AIR now supports evidence upload and archival to Google Cloud Storage. This provides analysts and investigation teams with greater flexibility in selecting secure cloud repositories for collected evidence, improving integration with multi-cloud environments and accelerating post-incident data availability for review.
What's New? Google Cloud Platform (GCP) Support: AIR now extends its cloud forensics and asset management capabilities to Google Cloud Platform.
Evidence Collection in Windows Recovery Environment – AIR Windows off‑network responders can now collect evidence while operating inside the Windows Recovery Environment (WinRE).
Binalyze, the cybersecurity company delivering AIR - Automated Investigation and Response, has announced three strategic leadership appointments to drive its next phase of global growth. Brian D. Owen has been named Chairman of the Board, Jonathan Rees joins as Chief Operating Officer, and Jim Hansen, a founding executive of Mandiant, joins the Board of Directors.
What's New? Maintenance Mode for Device Assets: Analysts can now place assets into Maintenance Mode to safely prevent task execution while performing diagnostics or hardware maintenance.
New report from Binalyze reveals $114K-per-hour cost of delayed cyberattack response
What's New? Investigation Hub Live Collaboration and Activity Sync: Analysts can now observe real-time user presence, comment updates, and evidence flag changes within the Investigation Hub.
