The Mandiant Advantage Security Validation (MA-SV) team is pleased to announce version 5.11.2.0 of the MA-SV platform.
General Enhancements
- Added additional event filtering capability, allowing users to configure specific filters for Integration and Host Events as another Match type
- Added a new setting in Advanced Settings where additional sleep time can be configured if needed to properly run some Actions
Bug Fixes
- Fixed an issue that prevented some bulk jobs from running successfully
- Fixed TAAM Dashboard panel display issue for Trending: Block Rate & Control: Prevented, Detected, Missed, & Total Tests
- Fixed an issue where Action error summary was not human readable
- Fixed an issue that prevented adding the Juniper JSA integration
- Fixed an issue with Windows OS systems configured for Spanish language where incorrect "Blocks" could occur on Actions run
- Improved ability to render large Jobs in the user interface
- Fixed an issue causing errors with the Splunk remote integration test query
- Fixed an issue that was causing errors with the MA-SV Migration Tool
Known Issues
- Local Event Filtering works as expected but is limited to Match Action, Match Integration, and Match Events (when the latter involve Raw Events). If a rule has a Match Event condition for any field other than Raw Event, the rule does not apply to Local Events. It only applies to events from standard local integrations in MA-SV.