Release Notes

Version 1.1.0

• Added multi-region support.
• Deprecation of the entities information enrichment for detections and events input. The entity’s information can only be retrieved with the entities input.
• Included the optional retrieval of the Virus Total information for the entities input.

• Added the Mitre Attack IDs and the rule's URL to the FortiNDRCloud:Detections Splunk events

Version 1.0.5

Detection polling strategy was improved to include a lag (10 minutes by default) to allow time for detections to be processed by the FortiNDR Cloud service before polling them.

Version 1.0.2, 1.0.3 and 104

Bug fixes

Version 1.0

First Fortinet release.