v3.0.4

Published: 15.11.2024

New Features

• Added Enrichment columns to Windows Sysmon & Sysmon Threat analysis. Data to these columns comes based on AI analysis.

• Added openVAS Linux Agent Integration. Based on checkbox Execute Vulnerability scan in IP Scan & Network Testing Policy, data comes to Vulnerability Scan Results grid.

• Added "Create ToDo" and "Create Risk" function under the "Create Incident" option for all grids. Also, standard functions have been added to many tables as part of table standardization.

• Added property "Category" to GRC Documents. When editing or creating document the "Category" field is also set.

• Added tooltip to display the message in full to "Windows Object And Honeypot Access" and "Windows File Activity Analysis".

• Added "Add Activity" & "View Activity" to right-clicked action in ToDo grid.

• Added data to Risk management Control mapping.

• Added opportunity to see Linux and Windows remediation function separately in Security Control Result grid.

• Added Recommended Remediation Levels for Windows, Mac and Linux in Security Control Result grid.

• Added Security Controls data for Linux.

• Added Security Control Results for Linux RedHat and Ubuntu machines.

• Added install nmap silently for Linux RedHat machine.

Improvements

• Improved removing KPI - Main Devices relationships. Disable main_devices score updating from other rules.

• Added filter to Displayed Grids field in Windows remediation functions creation flow.

• Added Windows Local Users, Windows Local Administrators, Active Directory Users, Active Directory Groups to the remediation tables.

• Added aggregation support for Sophos URL page.

Bug fixes

• Fixed editing network device Classification rules.

• Fixed Linux remediation flow.

• Fixed Installing Sysmon for Arm Processors.

• Fixed Threat Monitor Settings updating based on Threat Monitoring (Collection Interval) policy.