GREYCORTEX Mendel 4.6: Deeper host context and faster investigations

Clearer Context, Faster Investigations, and Smoother Workflows

With Mendel 4.6, we focused on strengthening visibility, investigation workflows, and enterprise readiness, based on real-world deployments and partner feedback.

Here’s what’s new:

Track devices as they change identity
Mendel now tracks all hostname changes over time in one timeline, so analysts can follow the same device even when its name or IP address shifts.

Identify devices using application-layer data

Mendel now uses application-layer metadata to reveal actual device roles and behavior, giving analysts the context they need for investigations.

Get to packet evidence for recorded traffic faster

One workspace consolidates capture and replay across all sensors, streamlining the retrospective investigation workflow.

Single Sign-On and SAML

SAML support complements existing LDAP, Kerberos, and OAuth options, making it easier to align Mendel with enterprise SSO and identity policies.

Napatech hardware bypass

High-performance sensors now support flow-preserving bypass mode that reduces CPU load.