Resolved issues

The following issues have been fixed in version 25.4. To inquire about a particular bug, please contact Customer Service & Support.

25.4.0

Fixed an issue where the Add Query button remained disabled even after correcting IQL syntax errors.

The Submit button on both the Reset and Change Password pages now functions correctly and no longer appears disabled.

Removed duplicate drop-downs in the Email Notification page.

Resolved an issue where an incorrect dialog appeared when unmuting a detection.

Fixed an issue in the Detection Device Timeline where the legend for resolved detections was not displayed.

Corrected the placement of Info icons in the Private Search page.

Resolved an issue with Multi-Factor Authentication (MFA) on EU portals.

Addressed a bug where src.mac and dst.mac fields were missing from NetFlow event data.

Fixed the date range in the Investigation Result page.

Resolved the errors being thrown in the Excludes tab in the Mutes and Excludes page

Fixed a display issue in the account subnets list table.

Fixed the training indicators in the Indicators tab.

Description
Fixed an issue with title case for event types in the results table.
Resolved an issue where invalid IQL queries behaved inconsistently depending on how the search was initiated
Resolved an issue where using Fit Width on the Timeframe column in the Behavioral Observations page caused the column to resize only one pixel at a time.
Fixed a spelling error on the Entity Lookup page

Description
Fixed an error when pivoting to the Detection Context page from Triage Detection page.
Resolved a styling issue in the Entity Panel that caused the bottom of the panel to be cut off in the CrowdStrike tab.
Fixed an issue with displaying muted devices by supporting three mute options: Mute Device for Detection, Mute Device for Detector, and Mute Device for Account.

Description
Fixed the styling in the Reports page to align the Report History link and Date selection.
Fixed the CrowdStrike redirect URL.
Corrected the text in the CrowdStrike EDR configuration dialog.
Fixed the button styles.

Description
When editing a rule, the test query is skipped if no changes have been made to the query.
Resolved an issue with the filters on the Telemetry page.
Fixed an issue with user role assignment on account creation.
Fixed an issue with muted devices not being displayed for a detector.
The search submit button is disabled after a query is submitted until there are changes to the query.
When pivoting from a detection table, the detection timeline now scrolls to the selected detection.
Editing a detector no longer requires running the test query unless the query has been modified.
The Sensor Telemetry page's Throughput tab now shows average values (bits/sec or EPS) in the legend instead of sums, providing a more accurate view of rate-based metrics.

Description
Resolved an error in the Entity Panel.
Fixed an issue with the widgets in the Security Posture report.
Resolved an issue with the Telemetry page where the Throughput tab was not displaying all the sensors.
Resolved an issue with the default filters in the Detections Table.
The Mute and Unmute buttons in the Triage Device and Detections Table pages have been fixed.

Description
Fixed an issue where the Bandwidth chart title was getting cut off.
Resolved errors that occurred in the Event Aggregation table.
Corrected the sensor legend on the Sensor Telemetry page to display all sensors as intended.
Fixed sorting issue for timeline view in Detection Context page.
Fixed observation pivot from Detection Context when First Seen and Last Seen are the same.

Description
The column order in the Column Profile is now saved correctly.
An issue with custom widget error handling has been resolved.

Description
Fixed the date picker in Sensor Telemetry to match the date range in the graph.
An issue with creating and deleting custom filters on the Triage Detections page has been fixed.
The entity validation now works as designed when selecting the entity type as Domain.
Resolved an issue where event data with fields that have `null` values did not match against IQL queries using the `NOT` operator. This issue also affected the EXCLUDE operator.

Description
Fixed inconsistent date selection behavior e in the Entity Panel
Fixed broken links in the Security Posture Report.
The Resolution Style no longer displays an invalid resolution period when set to Auto.

Description
Resolved an issue with the Column Profiles feature.
Fixed the account picker so it does not show All accounts when it is not supposed to.
Resolved an issue in the Sensor Telemetry >Visibility chart where clicking a subnet did not do anything.

Description
The Observation tab in the Entity Panel no longer displays an error when selecting more than 90 days.
Fixed the Entity Panel so that it no longer changes the date range.
Fixed the behavior of the portal Login button to prevent users from clicking it more than once.
Fixed an issue with the Resolved filter in the Detections Table.
Fixed a styling issue in the Entity Lookup page.

Description
Resolved an issue where the Visualizer was not updating after searching for an IP.
Fixed the tool tip content in the Sensor widget.
Fixed the tool tip for the context fields in the Observations instance table.
Fixed the tooltip message in the Accounts and Software tabs.

Description
Resolved an issue with the API Only filter in the Account Management page.
The Detections Table no longer displays a timestamp in the Mute Comment column.
Resolved an issue with role assignment during account creation for EU portals.
Events that are older than 90 days no longer generate an error in the Entity Panel.