The Mandiant Advantage Security Validation (MA-SV) team is pleased to announce version 5.12.3.0 of the MA-SV platform.
As a reminder for customers that use the Integrations App, we recommend that you start migrating to Preview Integrations.
General Enhancements
- Added documentation for the Content Export API in the Director settings web interface
- As of this release, Assessments is available as a full Public Preview. This means that the feature is available to all customers, but further refinement before full General Availability (GA) is forthcoming. See the Assessments documentation for more information.
Bug Fixes
- Fixed an issue where selecting "Show All Raw" of the suppressed Local Host events was not showing event details
- Fixed an issue where the Suppressed/Dropped event table of Local Host events would disappear
- Fixed an issue where users were unable to suppress/drop integration events
- Fixed an issue where users cannot open the VID details when reviewing reports
- Fixed an issue in Report Builder where attempting to edit an existing report resulted in a blank screen
- Fixed an issue where users were unable to delete S300 Evaluations
- Fixed an issue where users were unable to define security technologies due to detection and prevention name mismatches
- Fixed an issue where Classic Remote Integration Actors were having memory issues due to excessively logging integration testing
Known Issues
- Local Event Filtering works as expected but is limited to Match Action, Match Integration, and Match Events (when the latter involve Raw Events). If a rule has a Match Event condition for any field other than Raw Event, the rule does not apply to Local Events. It only applies to events from standard local integrations in MSV.
- Remote Integrations require an appliance-based Actor deployment and the Preview Remote Integrations currently retain the same limitation. Support is coming for installer-based Actors with remote integration support after GA of the new Integrations.
Important Installation Notes
As of Actor version 4.12.0.0, we have ended support for Actors on 32-bit architectures, as well as the following OSes: Windows 7, Windows 8.1, Windows Server 2012 R2, and MacOS 10.14 Mojave. Contact support if you have any questions or concerns. In the meantime, you must take the following actions:
- Retire any Endpoint Actors on these platforms
or - Replace the Actors with ones on supported platforms