Important Information

Added deprecation information in Microsoft Entra ID.

Added options to display related assets and indicators in Notifications.

Updated Licensing the Product.

Added Users - Organizational Units Tree Details. See Users.

Added Network Inventory in Settings.

Added Groups tab for Assets. See:

• Devices - Group Details

• Users - Group Details

Updated Incidents - Affected Assets:

Added details about tabs for each asset type.

Updated Notifications:

• Added a checkbox to send notifications only for incidents that were not prevented.

• Added Content section to include tenant name in email notifications.

Updated the description for Add filter option in Incidents page. See Incidents.

Added Assets tab. See:

• Assets

  • Users

  • Devices

Updated Log Processing:

• Added Daily Entitlement value to the Weekly log processing widget.

• Added a dotted line to show the entitlement in the Processing by product section.

• Added response integration configuration in Singularity Endpoint.

• Added Reset Password prevention action for all identity providers integrated through Infinity Next. See Supported Preventive Actions section in Microsoft Entra ID and Okta.

Added:

• Support for Mobile Security. See On-boarding Products and Incidents - Affected Assets.

• Views in Threat Topology map. See Threat Topology Map.

• Added video tutorial on how to manage an incident. See How to Address an Incident.

• Updated the procedure to send Microsoft Teams notifications for an incident. See Sending Microsoft Teams Notifications.

Added XDR integration with:

• Microsoft Entra ID

• Okta

Updated configuration information in Cisco Firepower Threat Defense

Added:

• Threat Topology Map

• Incidents - Attack Map

• Added XDR integration with Palo Alto Networks Next Generation Firewall. See Palo Alto Networks Next Generation Firewall.

• Added support for Microsoft 365 Defender for Endpoint and Palo Alto Networks Next Generation Firewall event logs. See Events.

• Added export of Threat Hunting data to CSV file. See Threat Hunting.

Updated for the new left navigation pane.

Added:

• Advanced Exclusions.

• Description field for Shared Bookmarks in Threat Hunting. See Saving a Query as a Bookmark.

• Support for logs from CrowdStrike Falcon, Trend Vision One for Endpoint and Cisco Firepower Threat Defense. See Events.

Added these integrations:

• CrowdStrike Falcon

• Trend Vision One for Endpoint

• Cisco Firepower Threat Defense

Updated the procedure to attach a contract to the product in Accessing the XDR Administrator Portal.

Added Fortinet FortiGate Next Generation Firewall to the list of supported products in On-boarding Products.

Rebranded Horizon XDR/XPR to XDR.

Added Fortinet FortiGate Next Generation Firewall.

Added:

• Trail request form. See Accessing the XDR Administrator Portal.

• Identity Service. See The table below shows the supported products, their log integration types, and whether they support response integration and IoC Management..

• Added information about support for Microsoft Active Directory and Cloud Firewall. See The table below shows the supported products, their log integration types, and whether they support response integration and IoC Management..

• Added Personalized News.

• Added Incident Description.

Added information about the supported regions for XDR and Threat Hunting. See Supported Regions and Threat Hunting.

• Added the procedure to create exclusion for artifacts in:

  • Creating an Exclusion for Artifacts and Indicators from an Incident.

  • Exclusions.

• Added information about the incidents prevented automatically by XDR. See Overview.

Added information about Saving a Query as a Bookmark and Custom Rules.

Added information about API Support.

Added the Take number for on-boarding Quantum Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. on-premises R81.10.