[Update] File Manager, Interactive PowerShell, and Smarter Timelines

We've shipped a set of features that sit right at the top of our request list. This release sharpens how you interact with live hosts in your deception environment and tightens up the fidelity of the telemetry you take away from every engagement. Here's what's new.

A Full File Manager on Every Running Host

Every running host now ships with a built-in file manager, giving you direct, hands-on control of the filesystem without leaving the platform. From a single interface you can:

• Upload files into the environment

• Download files off a host for offline analysis

• Move files between locations

• Rename files in place

• Add files to artifacts so they're captured alongside the rest of your engagement evidence

• Delete files when you need to clean up or reset state

This closes the loop between staging an environment and collecting what an adversary leaves behind. Whether you're seeding a host with bait, pulling a dropped payload for deeper inspection, or curating an artifact set for a report, it's all in one place.

An Interactive PowerShell Terminal

You now have a fully interactive PowerShell terminal wired directly into the deception environment. That means live, on-host command execution against your running hosts — no detours, no clunky workarounds. Inspect state, validate your environment, drive scenarios, or run ad hoc commands exactly as you would on a real Windows host. It's the kind of direct access that makes building and operating realistic Windows Active Directory deception infrastructure far faster.

Improved Timeline Generation

We've reworked timeline generation so that all detections are now properly included. The timeline you get is the complete picture — every detection that fired across the engagement lands where it belongs, in order. That accuracy matters when you're reconstructing an intrusion, mapping adversary behavior, or handing a defensible narrative to a downstream consumer of the data.

Get In Touch

These updates are live now across the platform. As always, much of what we ship comes straight from what you ask for, so keep the feedback coming. If you'd like a walkthrough of the new capabilities or want to talk about getting access to Deception.Pro telemetry, reach out and we'll get you set up.