September 15, 2022 Mandiant Advantage Threat Intelligence Release

New Versions

• Mandiant Advantage Threat Intel (MATI) v2.6.9
• Mandiant Advantage API (MAAPI) v1.31.15
• Mandiant Advantage Digital Threat Monitoring (DTM) v1.65.20

New in this Release

• MATI / MAAPI
  • Organizations moving from the Freemium version to a paid subscription will have the Domain mapping logic removed. This will give Customer Admins control over adding users to their Organization and prevent new users from being added automatically to the paid subscription through the general Marketing request form. 
    • New users who request access via the general Marketing form will be added to a new Organization that has only Freemium access.
  • Dashboards have been updated with visuals to display Actor Activity and Most Active Malware by Indicator Count
  • Actor Activity and Actor Trends widgets received backend enhancements to improve efficiency and performance.
• DTM
  • We improved the alert quality by standardizing the document and topic match extractions. For example, a monitor with a Lucene condition with an operator of MUST EQUAL of "john smith" would generate two alerts with different doc_matches:
    Alert 1: john
    Alert 2: smith
    With this release, the same monitor condition and value of john smith would generate a single doc_match with a value of John Smith and present it as one alert.
  • Updated the estimated results count in Research Tools.
  • Other UI Updates:
    • Multiple UI updates to Entity Table.
    • Extended vertical table of contents in Alert Details Entities tab to bottom of page.
    • Additional tooltip added to show the alert generated date when hovering the time on alert list and details page.
    • Removed stacked content view for Research Tools alert details.

Bug Fixes

• MATI / MAAPI
  • Link to Intel On Demand (IOD) Documentation corrected on the IOD subscription card on the Settings page.
• DTM
  • Fixed Matching Terms bug so that highlighting is correct within Alert Details.
  • Users can no longer save a Monitor unless every topic has a correct corresponding value.
  • Users can now properly Create/Edit and Save a Monitor with a Lucene Query topic as a condition.