Article
by M&NTIS team

January 2026: New features in M&NTIS Platform

We’re excited to announce M&NTIS Platform v26.1, a release focused on richer training content, deeper SIEM integration, and smoother learning experiences for blue teams.


⭐ Key Highlights

🌐 New English Scenarios

Three major scenarios are now fully available in English: Lumidus, Pandama and Flaroma.

These scenarios:

  • Simulate real-time end‑to‑end attacker behavior in realistic environments.
  • Enable more consistent training for international and English‑speaking teams.

You can now use these scenarios directly for blue team training, evaluations, and recurring exercises.


📡 Sekoia.io SIEM Alerts & Attack Step Correlation

M&NTIS 26.1 introduces full support for retrieving alerts from Sekoia.io SIEM and correlating them with attack steps executed in M&NTIS scenarios.

With this integration, you can:

  • Retrieve Sekoia.io alerts triggered during exercises and defense testing campaigns.
  • Automatically map each alert to specific attack steps, making it clear what triggered what.
  • Assess detection coverage, alert relevance, and rule quality in real time.
  • Use realistic attack paths to tune and validate Sekoia.io detection rules.

This closes the loop between offensive simulations and SOC monitoring, making your exercises and defense testing campaigns more actionable and aligned with day‑to‑day operations.


📝 Multiple Quiz Enhancements

We’ve improved the quiz experience for both learners and instructors.

🎨 Improved Quiz UI

  • Smoother navigation between questions and results.
  • Better readability for use in classrooms and training sessions.

👩‍🏫 Enhanced Instructor View

  • The instructor view now provides clearer visibility into learner answers.
  • This males it easier to debrief training sessions and highlight common mistakes.

📋 Other Release Changes

🗡️ Offensive

  • Fixed execution of Atomic Red Team files containing multiple tests.

🛡️ Defensive

  • Improved support for the Azure Arc agent in labs.

🧪 Labs

  • Improved frontend performance, resulting in faster page loads and a more responsive UI.
  • Added capability to create a lab via CLI with a public link to share for learners (this requires upgrading to the latest CLI version in 5.5.1).
  • Fixed lab data refresh issues on the frontend, ensuring lab information stays up to date.
  • Fixed tag display issues on the frontend, improving navigation and filtering.

M&NTIS 26.1 continues our focus on realistic, integrated blue team training and defense testing. By strengthening content, deepening SIEM integration, and refining the lab and quiz experience, this release helps make your cyber defense exercises more impactful and closer to real‑world operations.