Plugin & Integration Updates
- Authentik API integration has been added.
- ManageEngine Endpoint Central integration has been added.
- Trellix HX integration has been added.
- HarfangLab EDR integration has been added.
- SentinelOne Integration has been updated.
- Lenovo XClarity Controller plugin has been added.
- Trend Micro Worry-Free Business Security plugin has been added.
- Google Workspace response actions and SSO login support have been added.
- Stormshield Netasq plugin has been updated.
- Ruckus Cloud plugin has been updated.
- MSSQL plugin has been updated.
- NXLog plugin has been updated.
- Sechard plugin has been updated.
- MongoDB plugin has been updated.
Other Improvements
- Added
time_frameparameter support toget_incidentsand related API functions. - Added incident-based API feed support for
/get_incidents. - Improved API feed handling by supporting numeric
expire_timevalues. - Improved API behavior for failed SSO login responses.
- Added system improvements for float IP contender resolution.
- Improved incident synchronization reliability for MSS and Cyfusion environments.
- Improved hub Alert Timeline synchronization for MSS environments.
- Improved dashboard widget action-menu visibility.
- Added validation to MentionWidget to prevent whitespace in search text.
- Extended daily file signing quiet end time from 5 minutes to 30 minutes.
- Optimized bulk import deduplication by using pre-fetched descriptions.
- Added Sigma rules support.
- Improved incident artifact handling to prevent TriggeredAlert encoding issues.