We’re excited to announce the latest features and enhancements in Mandiant Attack Surface Management. 

What’s New 

Collection Configuration and Scan Changes

Paid customers now have control over the scope of Collection entity discovery with new configuration and scan settings. 

Strict Scoping

On March 30th, Strict Scoping will be the new default for Collection scans. Strict Scoping will narrow the discovery and enumeration process to the entities related to the designated Seeds. Upon the completion of scans after March 30th, entities discovered during previous scans will be moved to the ‘Inactive’ tab on the Entities search page. 

Customers can opt into Broad Scoping:

• Broad Scoping utilizes inference and the global intelligence repository to identify additional potential entities during the scoping process. However, it may result in false positives.
• To opt into Broad Scoping, go to Collection Settings > Scan Settings and toggle Enable Broad Scoping to On.

Configurable Cookies, Ports, and Header  

New Scan Settings enable Attack Surface Management to definitively scope assets that belong to your organization. Custom input types include: 

• Cookies
• Ports
• Headers

Configurable ‘Active’ Filter 

Define the timeline for when entities, technologies, and issues are considered ‘Inactive’. Go to Collection Scan Settings and choose the quantity of scans between first and last seen.

Expanded Scanning Capabilities

New scanning capabilities allow for new issue creation for:

• Domain Expiration Notification 
• Broken Link Detected

Export Enhancements

Entity, technology, and issue CSV exports contain an expanded set of fields, including Issue proof and remediation.

Enhancements 

• New checks and technology fingerprints are available in the library.
• An API enhancement increased the query limit from 10K to infinite. Users can now use the page_token to view the next page of results. See API documentation for details.  
• Entity searches now include Search Summaries on the right panel. 
• All entity pages now display the related Seed for additional context. 

• Mandiant Advantage Splunk App version 1.5 is now available 

For product questions, concerns or feedback, contact Support.