New features
Full support for incident response in Microsoft Teams
In addition to Slack, you can now handle incident response from Microsoft Teams. In Organization Settings, you can choose from three Teams message monitoring modes.
- Thread (default): Monitors only threads in which the bot is @mentioned
- Full channel monitoring: Monitors all messages in allowed channels. Messages in threads not yet linked to an incident are temporarily cached to detect potential incidents
- Emoji reaction mode: Normally does not read messages; only messages that receive the trigger reaction in designated channels are sent to Incident Lake
The advanced modes (full channel monitoring and emoji reaction) can be used in only one of Slack or Teams at a time. Switching one to an advanced mode automatically returns the other to thread mode.
Teams past command
Send @bot past in a Teams thread linked to an incident to search for similar past incidents and get the results in the same thread. If the thread is not linked, you'll receive a message prompting you to use go or link.
AI-suggested progress for incident response checklists
AI now periodically reads Slack/Teams conversations and incident notes and suggests steps that appear to be complete.
- Suggestions always require human confirmation; AI never marks steps complete automatically (choose Confirm or Dismiss)
- Each suggestion includes supporting evidence, such as "So-and-so's Slack message at 14:32 says the deployment is complete"
- When completing a step, you can optionally leave a note explaining your reasoning
- When suggestions are available, a single consolidated notification is posted to the Slack/Teams thread where the incident occurred, and you can open the checklist directly with the "Open Checklist" button
- In Workflow Settings, you can now click an SOP step's phase badge to assign it a color
Improvements
More readable security audit logs
Operation names in audit logs are now shown as human-readable names rather than internal identifiers. Older operation names not found in the catalog are also automatically formatted where possible.
Tenant name tooltips
In the tenant switcher menu, you can now hover over long, truncated tenant names to see them in full.
Fixes
- Teams: Fixed an issue where a reply's ID, rather than the thread's root message ID, was sometimes saved as the thread ID linked to an incident
- Teams: Confirmation replies and incident suggestions now arrive immediately after monitoring channels are configured, without an admin having to @mention the bot manually
- Teams: Fixed an issue where commands were not recognized when the space after a mention arrived as
or when a command had trailing punctuation, such aspast.