Now that SEM 2020.4 is generally available, all major functionality has been migrated to HTML5 interface and we will be pivoting to bring new features to SEM. Here is what we're working on, in no particular order:
- Microsoft 365 Events: Support for Microsoft 365 audit logs from sources including Azure Active Directory, Exchange, SharePoint, OneDrive, Teams and more. Vote for this feature.
- New Reporting Engine: Provide a new reporting engine in the HTML5 GUI and drop the need for Crystal Reports. Vote for this feature
- Additional Threat Feeds: Allow users to configure and use additional threat feeds. Vote for this feature.
- IP Geolocation: Map IP address to their geolocation and allow users to leverage location in filters, searches and rules. Vote for this feature
This list doesn't enumerate a lot of the features we're looking into for long term development and further releases, but we continually use Thwack as one of our biggest source of feedback
I hope you're happy with the direction SEM is going, but if there is something missing or a feature you're really keen on, be sure to vote for features in Security Event Manager Feature Requests forum.