Nov 2024

Enhancements

These are the enhancements made to existing functionalities on the Resolution Intelligence Cloud.

Entities

New Ingested Source Widget

A new Ingested Source widget is added, showing a graphical overview of entities ingested from multiple data sources.

Display of Active Entities by Category on Entity Inventory Page

Selecting a class under a category on the Entities Overview page now shows only active entities on the Entity details page, creating a more focused view.

Entity Import Enhancements

The Import Entities feature has been updated for improved usability and flexibility. New optional columns allow mapping additional fields (Like., location, user, manager) from CSV files.

Resolutions

Revamped Notes Design on Activity Tab for ActOns and Situations

Notes on the Activity tab are now displayed as selectable pills for easier filtering. Users can filter by note type (e.g., All Notes, Internal Notes, Resolution Notes) with a single click.

New Filters for Team and Owner in ActOns

The ActOns page now includes Team and Owner filters in the More Filters modal, allowing for refined ActOn filtering options.

Content Management System

Auto-Sync Updates Toggle for Parsers

A new Auto Sync Updates toggle on the Parsers page provides control over parser updates at different account levels (Domain, Organization, and Tenant). When enabled at the parent level, updates sync to all child accounts. Users at any level can disable this toggle for granular update control.

New Fields in Threat Feeds for Enhanced IOC Context

Additional metadata fields—Threat Actor, Campaign, CVE, and Malware—are now available for mapping in threat feeds uploaded via Configure URL method in JSON & CSV formats, enhancing IOC context for threat analysis.

Content Pack Notifications for Disabled Rules

• Separate sheets for failed and disabled rules in daily reports.
• Content pack reports consisting of all issues are consolidated into a single sheet for easier reference. Improving visibility and monitoring of rule issues.

Malware uploader

Malware Upload Notification

A notification is now sent to the security team whenever a file is uploaded for malware scanning, ensuring timely review of potential threats.