> For the complete documentation index, see [llms.txt](https://docs.material.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.28.md).

# Version 1.28

## Filter Issues by Detection

You can now filter the issue list by detection type.

1. From the left navigation, click **Issues**.
2. Click the **filter** icon (three lines next to search).
3. Choose **Detection**.
4. Select the detection(s) to filter by.

<figure><img src="/files/ll1YJp1QgUyjqtBNTgsk" alt="the filter icon is three lines next to search, choose detection to filter by detection type"><figcaption><p>Issue Page</p></figcaption></figure>

Note, this filter [replaces the previous **Detected By** column](/whats-new/previous-releases/1.15-to-1.43/version-1.27/unified-phishing-issue-experience.md#view-by-issue-detection-source).

***

## Assign Issues

You can now [assign issues](/getting-started/fundamentals/investigate/assign-issues.md) to a specific employee to improve accountability and streamline your triage processes.

1. From the issue detail view, click **Assign to...**
2. Select an assignee from the list, or type their name in the box to search.

You can also use the shortcut `⌘K`, then click **Assign to...** to choose an assignee.

<figure><img src="/files/8KgTkoOaON2Orz95cq7J" alt="from the issue detail view, a button with a person icon indicates the Assign to function" width="375"><figcaption><p>Issue Detail View</p></figcaption></figure>

{% hint style="success" %}

* Assignees must have a [role assigned](/learn-more/administration/admin-roles.md) in Material.
* Deactivated users appear in the list as `<username> (deactivated)`, while deleted users display as `Unknown`.
  {% endhint %}

***

## Email Threat Issues: Filter by Tactic or Analysis

Two new filters are available in Email Threats to help you focus your triage: Tactic and Analysis.

1. From the left navigation, expand **Issues** then click **Email Threats**.
2. Click the filter icon (three, cascading lines).
3. Click **Tactic** or click **Analysis**, then choose **one or more filter options** to narrow the issue list.

<figure><img src="/files/Fbe9XJlCJFpJwqV6x81l" alt="the icon for an issue filter looks like three cascading lines" width="201"><figcaption><p>Email Threat Issue Filters</p></figcaption></figure>

***

## Employee Title in Issue Details

Understanding a person's role within a department can be helpful when trying to investigate the urgency or potential severity of an issue surfaced by Material. Employee Titles are now included in the Issue Detail View:

<figure><img src="/files/qzUia74OwB6g1Wv6ysLB" alt="" width="563"><figcaption><p>Issue Detail View</p></figcaption></figure>

Issue titles sync from your Google Workspace or Microsoft 365 account.

***

## Prebuilt Issue Views

Prebuilt views are now available for issues.

* From the left navigation, expand **Issues** then click a **view** to quickly filter the issues list.

New views include:

* User Reported Phishing Issues (**User Reports**)
* Data Security
* Data Governance
* Configuration Management

<figure><img src="/files/H8BujfYn0E7Mf1beG64T" alt="issues navigation and quick views" width="229"><figcaption><p>Issues Navigation</p></figcaption></figure>

***

## New Message Search Operators

[Message Search](/getting-started/fundamentals/explore.md) has three new operators:

* `recipients.has_personal_email`
* `recipients.has_disposable_email`
* `recipients.addresses`

***

## Shortcut to Copy Issue ID

When troubleshooting, you may be asked to share the issue with us and/or to send us the Issue ID. To copy this issue ID onto your clipboard, use the `⌘K` shortcut then click **Copy issue ID**.

<figure><img src="/files/wdBt6woYnOQEFupWGLBh" alt="Copy issue ID is available from the ⌘K shortcut menu" width="375"><figcaption><p>⌘K opens shortcuts</p></figcaption></figure>

<figure><img src="/files/wdBt6woYnOQEFupWGLBh" alt="copy issue id is located in the shortcut using ⌘K" width="375"><figcaption><p>Open Shortcuts with ⌘K</p></figcaption></figure>

### Updated Email Threat Issue ID Location

Email Threat Issue IDs (formerly known as Case IDs) are now present on the [issue detail ](/getting-started/fundamentals/investigate.md#issues-page-and-issue-detail-view)[view](/getting-started/fundamentals/investigate.md#issues-page-and-issue-detail-view):

<figure><img src="/files/fVA1qG6KHYQMsLTpSr8o" alt="" width="375"><figcaption><p>Updated Email Threat Issue ID location</p></figcaption></figure>

You can also copy an email threat issue ID using the [shortcut](#shortcut-to-copy-issue-id) described above.

***

## Email Threat Detection Improvements

Material now also detects:

* When a message spoofs Google using the default sender address and links to a Google Sites edit page
* Messages that address users by email (instead of name)
* Messages asking for sensitive info, sent from freshly minted domains, are now more likely to be flagged
* Fake account alerts and email quarantine messages

HTML attachment detections were also refined to better catch embedded JavaScript.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.28.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.