July 10, 2023 Mandiant Advantage Threat Intelligence Release

New Versions

• Mandiant Advantage Threat Intelligence (MATI) v3.0.1 and Digital Threat Monitoring (DTM) v1.119.2

New in this Release

• MATI Reports (General Availability)
  • Enhanced user experience for reports by improving readability and accessibility, updating styling, adding links to actors and malware families, extracting tags for easy reference, and other enhancements.
    For additional details, see Threat Intelligence Reports.
• Actors 2.0.1 (General Availability)
  • Implemented the following changes to improve actionability for customers:
    • Ability to track usage from the client side to support easy use of Product Landing Dashboards.
    • Ability to download TTPs from the Explore Actor card and Actor Details page.
    • Added Campaigns to the list of what’s new on the Actor Details page.
    • Applied various minor user experience (UX) bug fixes and code cleanup.
• UX Consistency Enhancement for Explore Pages (General Availability)
  • Implemented the following changes to improve usability and provide consistent UX across Explore pages:
    • Ability to follow Threat Actors has been extended to additional threats including Malware, Campaigns, and Vulnerabilities.
    • Consistent UX for the entity profile cards across Explore pages (Actors, Malware, Campaigns, and Vulnerabilities).
    • Additional UX consistency improvements for MITRE Explore cards.
• Digital Threat Monitoring (DTM) Domain Protection (General Availability)
  • Enhanced domain protection in DTM in order to provide extended and comprehensive coverage for the core domain protection use cases. Key benefits include detection of the following:
    • Risk posed by threat actors who register typo-squatted domains in country code top-level domains (ccTLDs) and sponsored top-level domains (sTLDs).
    • Brand name impersonation in URLs and sub-domains or employment of punny codes for phishing and other malicious activities.
    • Completed the layout refinements for Alert list matching terms display, including addition of Indicator Confidence (IC) score.
• Best Threat Intelligence Data (Private Preview)
  • Implemented an Indicator Severity Score for all Indicators of Compromise (IoCs). This will enable analysts to focus on what is most important and actionable.
• Threat Profiles (Personalizing the Threat Landscape) (Private Preview)
  • Delivered UI improvements to enable future changes that support a focused approach to automating threat prioritization and understanding the threat landscape.
    For additional details, see How to Build a Personalized Threat Profile.
• MATI AI Search Summary (Private Preview)
  • Provided the ability for MATI to enable CTI and SOC analysts to retrieve relevant information based on natural language queries of varying complexity.
    For additional details, see How to Use Advanced Search.

Bug Fixes

• Predicted risk rating now displays in the Risk Rating field in the UI when a risk rating is not available.