Version 1.31

✨ New

Okta SSF Integration

We’ve integrated with Okta’s Shared Signals Framework (SSF) to provide security event notifications within Okta environments. This enhances incident detection, response, and automation, ensuring that security-relevant events from Material (such as Issue changes) are seamlessly transmitted to Okta.

Learn how to integrate with Okta SSF.

Okta SSF Integration

---

Quick Actions in Message Details

Digging into a message just got smoother. We’ve added a dialog in Message Details so that you can quickly jump straight to message search, add a trusted sender, or block a sender. Fewer clicks, more control.

Create a Trusted Entity from an Issue

1. Begin in a specific issue.
2. In the message details, click the Sender Address.

Click the sender, then click Trust

1. From the quick action menu, click Trust.
2. Choose to apply this to one tenant or globally, subdomain inclusion, and phishing and file settings:
3. Click Save.

   

   Trusted Entity Settings

To reverse this action, click Un-trust from the same quick action menu in the issue.

Block a sender from an Issue

You can block a sender directly from the message details in an issue to prevent them or their associated domain from delivering messages into inboxes.

1. Begin in a specific issue.
2. In the message details, click the Sender Address.
3. From the quick action menu, click Block.

   

   Click the sender, then click Trust
4. Choose to block just this sender's email address, or their entire domain:

   

   Block one sender or any sender in their domain
5. A custom detection is created deleting messages from that sender. Click the pop-up in the bottom left corner to view the detection (or from Detections, search for the domain to find the detection).

   

   Sender blocked successfully

   To unblock a sender, archive the detection.

It's possible to both Trust and Block a sender from the quick actions menu. If both actions are taken, we defer to the Trusted Entity and the sender is not blocked, regardless of existing or future detections.

Open message search from message details

1. Begin in a specific issue.
2. In the message details, click the Sender Address.
3. From the quick action menu, click Search messages.

Click the sender, then click Trust

1. The message explorer opens pre-populated with a query searching for all messages from this sender.

---

🛠️ Updates & Bug Fixes

• Event Subscription UI polish - Cleaner, more intuitive, and easier on the eyes.
• Table Columns, Remembered - Column reordering in tables now sticks around, even after a page reload. Your layout, your rules.
• Smarter Message Search Links - Clicking into a message search now pre-fills the form with context. Less typing, more finding.
• Issue Search Upgrades - You can now filter issues by classification and assignee. Because precision is powerful.

  

  New issue filters

---

🛡️Email Threat Detection Tuning

• Enhanced detections that depend on sender reputation to include more robust context for advanced tactics.
• Added improved brand impersonation detections including specific coverage for several high profile brand targets.
• Added new high fidelity detections in response to specific observed campaigns and techniques.