Work is currently underway on an extension module for Suri Oculus.
The release is planned for May 2026.
The extension focuses on a different analytical perspective: not event-centric, but host-centric analysis. Instead of examining individual alerts in isolation, the system will analyze device behavior over time.
Key Principles
Host Behavior Profiling — building compact behavioral fingerprints for internal network devices.
Baseline vs Current Comparison — detecting deviations from normal activity.
Deviation Scoring — clear, explainable behavior change metrics (no black-box logic).
Contextual Analysis — correlating alerts with host activity patterns.
Separation of Core and Extension — the module will operate as an independent backend component while remaining fully integrated within the Suri Oculus ecosystem.
The extension is designed to complement the existing event-focused functionality, adding a higher-level analytical layer aimed at improving situational awareness and incident investigation.
More technical details will be published closer to the release date.