(changelog-ml-engine)=

# Plixer ML Engine changelogs

Changelog entries are displayed in the format **DESCRIPTION (Ticket Number)**.

:::{NOTE}
- For more information on the Plixer ML Engine and the Plixer One platform , visit [www.plixer.com](https://www.plixer.com) or contact {ref}`Plixer Technical Support <resource-technical-support>`.
- Please refer to our [End of Life Policy](https://docs.plixer.com/en/latest/product_release_eol.html) for EOL schedule details.
:::

## Plixer ML Engine v19.7.0 - October 2025

::::{dropdown} Changelog
:open:

### New features

- Support for IPv6 subnets in ML Engine rules
- The ability to configure which IP Groups Deep Graph Learning is watching

::::

## Plixer ML Engine v19.5.0 - March 2025

::::{dropdown} Changelog

### New features

- Detect brute force activity using failed SMB logon attempts
- Detect remote ransomware attacks using SMB read/write data
- Support ability to modify AI Engine deployment settings from the user interface
- Support custom thresholds for data accumulation detections
- Support KVM
- Support offline vSphere cluster deployments

### Enhancements

- Optimize processing to support larger workloads
- Prompt user for deployment information rather than use configuration files
- Support ability to modify AI engine application settings from the user interface
- Support ability to modify AI Engine seasonality settings from the user interface
- Support child groups for IP Group exclusions
- Support extending expiration date of ssl certificate used by Kubernetes cluster
- Verify application pods are updated during an online system update

### Fixes

- Addressed various security issues
- Define violator and target correctly for brute force events (889)
- Update rogue DHCP detection logic (954)

::::

## Plixer ML Engine v19.4.0 - August 2024

::::{dropdown} Changelog

### New features

- User behavior analytics for O365/Azure AD
- Encrypted Traffic Analytics (ETA)
- New base operating system: Ubuntu
- Added LDAP rogue service detection
- Added support for Hyper-V deployments
- Added new alert type in Scrutinizer for Suricata TLS alerts
- Added support for IP groups in exclusions

### Fixes

- Addressed various security issues
- Behavior tab missing after upgrading to 19.3 (745)
- Time zone set as UTC causing training data to not be associated correctly with workdays/weeknights/weekends (750)
- An ML engine can now pair with a multi-collector distributed Scrutinizer (757)
- Certain utilities not functioning properly with 19.3 (786)
- Improved ML event messages by including additional details (810)

::::
