---
title: "May 2026"
slug: "may-2026"
updated: 2026-06-16T06:43:46Z
published: 2026-06-16T06:43:46Z
canonical: "docs.hunters.ai/may-2026"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# May 2026

## Product

### *Democratize Data — Private Preview Expansion*

The Democratize Data private preview is expanding with new capabilities that let you bring custom data into the Hunters platform.

You can now onboard data from your own S3 buckets directly into Hunters. Once ingested, your data is automatically mapped to the OCSF (Open Cybersecurity Schema Framework) data model, making it immediately available for detection and investigation workflows without manual schema configuration.

This means security teams can analyze data sources that aren't covered by built-in integrations, while maintaining full compatibility with the Hunters detection engine.

To participate in the preview or for any related questions, please [contact us](mailto:b1n6z2m4k9d1x9a5@hunters-ai.slack.com).

### *Pathfinder - Organizational Context - private preview*

We are pleased to announce the upcoming private preview of the new Pathfinder organizational context capability rolling out.

This feature will enhance investigations by allowing you to add relevant organizational context for Pathfinder to utilize.

During this preview phase, you will be able to manually create this context. Future plans include capabilities for Pathfinder to automatically generate organizational context.

To participate in the preview or for any related questions, please [contact us](mailto:b1n6z2m4k9d1x9a5@hunters-ai.slack.com).

*Hunters portal navigation bar*

We've restructured the Hunters platform navigation to make it easier to find what you need. The sidebar now groups pages by workflow and persona rather than legacy product boundaries.

This change will be rolled out soon.

### *Detector settings link in leads detail*

We've added a direct Detector settings link beside the detector title within the alert detail panel. This allows you to quickly access the

specific configuration of a detector during triage, providing analysts with immediate context without navigating away from the alert.

![](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/base64-converted-image-1781592202555.png)

### *Enrichments*

Enrichment descriptions are now visible when clicking the question mark button next to the enrichment title.

![](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/base64-converted-image-1781592202557.png)

## Security Content

### Deprecated detectors

Windows account locked

As part of an ongoing quality monitoring, this detector was found to be very noisy and inaccurate. This detector will be replaced by a new drilldown that will present recent lock and unlock events for Windows users. In addition, a new scoring model will increase score in case the Windows user was recently locked. **The deprecation time is planned for May 24, 2026.**

## Integrations

### *New Integrations Releases:*

1. Cloudflare Magic IDS
2. Zscaler Deception
3. BeyondTrust Privileged Remote Access
4. ServiceNow System Logs
5. ServiceNow Outbound HTTP Logs
6. ServiceNow Incident Logs
7. ServiceNow System Events Logs
8. ServiceNow User Session Logs