We’re pleased to announce M&NTIS Platform v26.5, a release focused on deepening the realism of SOC and CERT team training. This update extends our EDR ecosystem support, refines the user experience for both new and experienced users, and continues to bring lab environments closer to real-world enterprise conditions.
⭐ Key Highlights
🦅 CrowdStrike Falcon EDR Support
M&NTIS now supports CrowdStrike Falcon as an additional EDR in lab environments.
This initial integration enables the automated enrollment of CrowdStrike Falcon agents using the customer’s own CID (Customer ID) on their test tenant. Teams can now train detection and response teams and workflows using their actual EDR stack, bridging the gap between training exercises and production tooling.
This addition joins our existing HarfangLab and SentinelOne EDR support, expanding the range of real-world defensive toolchains that can be validated within M&NTIS environments.
📋 Other Release Changes
Labs
- Added Firefox internet connectivity within lab environments, enabling realistic legitimate web browsing activity from lab endpoints. This creates more legitimate network traffic patterns and activity logs for training scenarios.
User Experience
- Enriched lab activity notifications: users now receive clearer, more informative notifications at key moments, including when a lab is ready for investigation and when an evaluation questionnaire becomes available.
- Improved Trial mode workflow: the onboarding experience for trial accounts has been redesigned to better guide new users through M&NTIS capabilities step by step, reducing time-to-value for teams discovering and evaluating the platform.
M&NTIS v26.5 reflects our ongoing commitment to making cyberdefense training environments as realistic, accessible, and tool-compatible as possible. By expanding EDR support and enriching the day-to-day user experience, this release helps SOC and CERT teams train with greater confidence and efficiency.