All Binalyze resources in one place.
What's New? Git-Managed Triage Rules: Security and investigation teams can now connect their organization’s Git repositories (GitHub, GitLab, Azure DevOps, or Bitbucket) directly to AIR to manage YARA, Sigma, and osquery triage rules as their single source of truth.
The quiet problem we’ve accepted Let’s be honest about how most investigations actually work today.
If you’ve ever been in a security operations center (SOC), you know the feeling. It’s like trying to drink from a firehose. Thousands of alerts pour in every day, and your team is overwhelmed, trying to figure out which ones are real fires and which are just false alarms.
New Features & Improvements. AIR Console. MITRE ATT&CK Rules Download Optimization and Resilience.
What's New? Advanced Time Display and Copy Options – The DateTime component within AIR Console now allows analysts to view and copy timestamps in multiple formats including UTC, ISO, local, and relative time.
When a security incident strikes, time is everything. The faster you can scope, contain, and investigate, the less impact it has on your business. Gartner states that digital forensics and incident response retainer services augment capacity and capability when responding to cybersecurity incidents.
Scaling Incident Response services is a challenge. Customers expect speed, readiness, and proactive support but talent is scarce and expectations keep rising. Gartner Market Guide for Digital Forensics and Incident Response (DFIR) Retainer Services (July 2025) should be used to understand the DFIR market, evaluate trends, refine requirements and identify market players., but I feel, it’s just as valuable for service providers.
What CISOs Expect From Investigations in 2026: Speed, Clarity, Proof. Cyberattacks aren’t a “risk” anymore. They’re an operating condition. In The State of Cybersecurity Investigations 2026 Report, 84% of CISOs say a successful cyberattack is “inevitable.”
What's New? Google Cloud Storage support – AIR now supports evidence upload and archival to Google Cloud Storage. This provides analysts and investigation teams with greater flexibility in selecting secure cloud repositories for collected evidence, improving integration with multi-cloud environments and accelerating post-incident data availability for review.
