What we built: May 2026
ID: c0f991cb-c88f-5b22-ad58-ffad022f55df
STIX ID: report--c0f991cb-c88f-5b22-ad58-ffad022f55df
Feed Name: Expel Blog
**Executive summary:** This monthly product update outlines three new hypothesis-driven threat hunts (endpoint, Office 365/Entra ID, and SharePoint exfiltration), an enhanced alert grid view in the Expel Workbench for cross-source triage, and a Ruxie-powered blocked malware triage agent that automates enrichment and a deterministic decision engine to speed analyst workflow.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.