Updated Articles

  1. Working with Monitor Groups

    You can group Monitors together into a Monitor group, which helps you to organize and administer Monitors. For example, you can create a Monitor group that is built for a particular use case (e.g., DLP) or that delineates responsibility (e.g., Net...
  2. Working with Disconnected Monitors

    The AEDA Configuration page may contain a Disconnected Monitors section. This section is only displayed if a Sequence or Evaluation that is used in a Monitor has been edited and if some monitors are disconnected. The Disconnected Monitor s...
  3. Working with Failed Monitors

    When an Action in a Monitor does not meet expectations, you may have configured the system to send you notifications via email or syslog. You may also choose to review the failing Monitors in the platform. To make this review easier, failed monito...
  4. Advanced Settings for Security Validation

    The Advanced Settings page is where you edit Director, Actor, and security content settings. You must have the Settings - Edit permission to make updates on Advanced Settings. To access the Advanced Settings page, go to Settings  > Director Se...
  5. Policy Document: Security Validation Software Version Support

    This message communicates important information for customers on how the Mandiant Security Validation team supports releases of software over the lifecycle of the product.  To prioritize uptime and reduce the risk of any unanticipated issues,...
  6. Windows 64-bit Actor Artifacts and Services

    Version 4.14.6.1 We've created a csv that includes the Windows Actor files and their hashes to make it easier to add to your security technology's Allow Lists. Type Download link Size (Estimated) SHA256 ...
  7. Product Update 4.14.6.0 - May 12, 2026

    The Mandiant Security Validation (MSV) team is pleased to announce version 4.14.6.0 of the MSV platform. Enhancements Updates to Director and content to support MITRE ATT&CK v18. Added support for Remote Integrations on installable...
  8. Run Actions

    Actions are suspicious or malicious behaviors that are processed between or on Actors. Actions are designed to mimic attacker behaviors. Running Actions in your environment is a useful starting point, as they can help you understand how your env...
  9. MSV 4.14.6.0 API

  10. Set up your Director to use an external database

    If necessary, you can configure an on-prem Director to use an external database. This option allows you to scale system performance and meet IT risk requirements. Requirements Note the following information about the supported P...