The Mandiant Advantage Security Validation (MA-SV) team is pleased to announce version 5.12.2.0 of the MA-SV platform.
For customers that use the Integrations App, we recommend that you start migrating to Preview Integrations.
Bug Fixes
- Fixed an issue "500 internal server error" was displayed when calling the "get_tags.json" API endpoint
- Fixed an issue where "Run Now" button was not always properly starting actions
- Fixed an issue where "Run Again" was not working for CLI Actions or Evaluations
- Fixed an issue where the Content Service was not updating content automatically
- Fixed an issue where users were unable to create a new security technology integration
- Fixed an issue where disabling "Auto Interface" on Windows Actors would not persist
- Fixed an issue where using PCAP Capture Enabled with non-root running Actors causes Actions to result in an error
- Fixed an issue where Operational Status displayed a non-existent error
- Fixed an issue with the Classic Splunk Integration where the Integration Actor was running into errors while processing raw events
- Fixed an issue where Repeating and Scheduled jobs were not honoring the selected proxy configuration
- Fixed an issue that prevented editing previously-created Preview Remote Integrations
- Fixed an issue where the drop down list was missing for filters in the Actions Library
- Fixed an issue where Organization creation was taking excessive amounts of time
Known Issues
- Local Event Filtering works as expected but is limited to Match Action, Match Integration, and Match Events (when the latter involve Raw Events). If a rule has a Match Event condition for any field other than Raw Event, the rule does not apply to Local Events. It only applies to events from standard local integrations in MSV.
- Remote Integrations require an appliance-based Actor deployment and the Preview Remote Integrations currently retain the same limitation. Support is coming for installer-based Actors with remote integration support after GA of the new Integrations.
Important Installation Notes
As of Actor version 4.12.0.0, we have ended support for Actors on 32-bit architectures, as well as the following OSes: Windows 7, Windows 8.1, Windows Server 2012 R2, and MacOS 10.14 Mojave. Contact support if you have any questions or concerns. In the meantime, you must take the following actions:
- Retire any Endpoint Actors on these platforms
or - Replace the Actors with ones on supported platforms