May was a milestone month for Adlumin XDR users, packed with powerful updates that elevate security operations, streamline support, and expand learning opportunities. From smarter automation with our new SOAR playbook to enhanced visibility across Google Workspace and a more unified support experience through N-able, these updates are designed to help MSPs and IT service providers and security teams move faster, respond smarter, and stay ahead of threats. Whether you’re managing multiple tenants, fine-tuning detection rules, or looking to deepen your expertise, there’s something in this release to make your day-to-day more effective and efficient.

What’s New

Global Custom Detection

Starting off with a quick reminder, earlier this month, we rolled out Global Custom Detections, a major enhancement that simplifies how you manage detection rules across tenants. This update eliminates the need to configure rules one tenant at a time, giving you a centralized, scalable way to create, validate, and deploy detections. Bonus: it also doubles as a powerful cross-tenant log research tool, helping you investigate threats faster and more efficiently, all from within the Partner Console.

To learn more, check out the full announcement here: Launching Tomorrow (May 21st): Scalable Custom Detection Rules for Adlumin Users | N-able Status

Adlumin MDR Extended Endpoint Remediation SOAR Playbook

Now available in Beta our latest SOAR playbook titled “Adlumin MDR Extended Endpoint Remediation” a cutting-edge capability that enhances traditional endpoint defenses by using AI to detect and eliminate threats that EDR and NGAV tools may miss. It identifies and neutralizes lingering malicious activity—such as stealthy persistence mechanisms, malicious processes, and unremoved files—that could allow attackers to maintain control over compromised systems. By automating actions like terminating processes, deleting files, and disabling malicious services and tasks, this playbook ensures systems are fully cleaned.

The end result: reduced risk, faster response, and stronger assurance that threats are truly eradicated.

Google Workspace Multi-User Sync

Organizations often need to monitor multiple Google Workspace accounts to gain full visibility into user activity and potential threats. With our latest update, admins can now sync up to three users per tenant—unlocking broader visibility and stronger alignment with how teams operate. Multiple credentials can be added to the system, and users can easily toggle which accounts are actively syncing to stay within the three-user limit.

This enhancement boosts threat detection across accounts while maintaining high performance and reliability, giving teams the flexibility and control they need to secure their environments effectively.

Adlumin Agent v1.6.2.9 (Windows)

The latest release of the Adlumin Agent includes important updates that improve logging completeness and ensure compatibility with modern system environments. This version introduces a new requirement for the Windows agent: .NET Framework 4.8 or higher must be installed on the endpoint. This upgrade enables better integration with current Windows features and improves long-term supportability. (Note: this requirement does not apply to the Universal Agent.)

While most installations will complete without interruption, a reboot may be required in some cases. We strongly recommend upgrading any devices currently running version 1.6.2.8 to take advantage of these enhancements.

To learn more: https://adlumin.document360.io/docs/adlumin-agent-information

First Adlumin Course Now Live on N-able University

We’re excited to announce the launch of our very first Adlumin course on N-able University: Getting Started with N-able Adlumin for IT Professionals. This foundational training is designed to help IT professionals quickly get up to speed with the Adlumin security platform. It covers everything from logging in and navigating the dashboard to deploying the Adlumin Agent, understanding system requirements, and exploring deployment options. Learners will also dive into the three telemetry log sources—Adlumin Agent, APIs, and Syslog Forwarder—and learn how to manage accounts, monitor access, and track suspicious activity. The course wraps with an introduction to SIEM functionality, including alerts, notification clearing, and dashboard tiles.

Coming up next: A tailored Getting Started course just for MSPs!

Streamlined Support

As part of Adlumin’s integration into the N-able family, Adlumin direct customers now have access to a more powerful and flexible support experience. This includes live chat, phone-based support, and the enhanced N-ableMe customer portal.

While the visual below shows what Adlumin direct customers saw in-product, the same information was also shared via email for those receiving this update.

For full details, see the in-product message below.

Stay Informed with Status & Uptime Updates

To stay up to speed on the latest Adlumin updates, planned maintenance, and service availability, we strongly encourage all customers to subscribe to both of our key status channels:

• https://status.n-able.com/: Get notified about product updates, enhancements, and important notices.
• https://uptime.n-able.com/: Stay informed about system uptime, planned maintenance, and service interruptions.

Subscribing ensures you never miss a critical update and helps your team stay ahead with real-time visibility into platform performance and changes.