---
title: "Product Update - Jan. 1st, 2024"
slug: "product-update-jan-1st-2024"
updated: 2026-06-24T08:28:41Z
published: 2026-06-24T08:28:41Z
canonical: "knowledge.catonetworks.com/product-update-jan-1st-2024"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.catonetworks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Product Update - Jan. 1st, 2024

## New Features & Enhancements

- **Endpoint Visibility in Stories Workbench:** We’re integrating Microsoft [Defender for Endpoint](/v1/docs/microsoft-defender-for-endpoint-alerts-configuring-the-xops-integration) with Cato Detection & Response to let analysts include endpoint devices in their investigations in the [Stories Workbench](https://support.catonetworks.com/hc/en-us/articles/10432821788573). This will be available for all Cato customers who use Microsoft Defender for Endpoint.
  - There is a new **Endpoint Alerts** story type that incorporates data about suspicious activity from Defender Alerts and Evidences, including:
    - Device and user details
    - Relevant processes, files, registry values, and more
  - A new event sub-type **Endpoint Alert** is generated for Microsoft Defender events, and you can review it in the [Events](/v1/docs/analyzing-events-in-your-network) page

> [!NOTE]
> Note:
> 
> Content described in this update is gradually rolled out to the Cato PoPs over a two-week period. In addition, new features are gradually activated in the Cato Management Application over the same two-week rollout period as the PoPs. For more information, see this [article](/v1/docs/understanding-rollout-to-the-cato-cloud-1). See the [Cato Status Page](https://status.catonetworks.com/) for more information about the planned maintenance schedule.