31 July 2024 version 2024.7.0
Improved functionality
Investigation tooltip
An investigation tooltip has been added to the Investigations widget in the default dashboard, the Investigations page, and the search results in global search.
You can also disable the investigation tooltip from the Profile Settings page.
Sensors
Filter by sensor version
A new filter was added to the Sensors page allowing you to filter by the sensor version.
PCAP column
A sortable PCAP column was added to the Sensors page indicating if Packet Capture is enabled or disabled.
Sensor last update
A Last Updated field was added to the sensor detail page.
Investigations
Packet Capture page
The Investigations > Packet Capture page has been updated.
The sensor filter only shows the sensors that have PCAPs configured. That is, the PCAPs where that sensor is configured and any PCAP that has files from that sensor are shown. If there are any All PCAPs configured, All can be selected. By default, No Filters is selected.
In the Files section, a sortable Sensor column that lists the sensor IDs was added. The files table is also now scrollable, instead of paginated.
Other improvements
Metastream module
The Metastream module has been redesigned to align with the look and feel of the other integrations on the page. If there is an error while enabling the integration, an error will appear at the top of the page.
Custom Dashboards
Custom dashboards now support default names, allowing users to add a dashboard without a unique name.
GUI
- The Copy button has been updated and standardized across the portal.
- A link to the CSV guidelines document has been added on the Manage Annotations page.
- In Reports > Network Security Posture Report, you can now click an event to start an investigation.