July 2024

New Features

• The following fields are added to the new Auth Type (Token URL Auth).

  • Armis: SecretKey

  • HCL AppScan: SecretKey, keyId

  • Informatica: username, password

  • Zscalar ZCC: ApiKey, SecretKey

• A button is added on the entity detail view page that pivots to the search page for that entity to query all items with that ID, showing all of the updates made to that entity over time.

• The fields IntegrationKey and Secret Key in Cisco Duo are added to the new auth support HMAC Signature.

• If the entity doesn't exist at the specified time, an alert, with a link to the valid time, is displayed.

• Detection Chains can be searched by enabled/disabled filters.

• You can now sort the Detection Chains links alphabetically and by time range.

• An additional, optional, warehouse can now be added to the Databricks configuration to separate ingest and user interface interactions. 

• A button is added to the entity detail page to show modification history by pivoting to the search page.

• A pivot functionality which takes you to the entity details page is added to Detection Streams and Detection Chains.

• An evidence row is added to the Entity View for DataBee Security Findings.

• Support for passing custom query format for timestamp-based filters in API Ingest is added.

• When a user denies all potential owners for a device, owner discovery will no longer predict any of those owners in the future.

• DataHub is deployed while configuring the data lake if it does not exist. DataHub allows users to visualize interactions and data lineage throughout the DataBee product.

Feature Enhancements

• Switch all datalake table row identifiers from basic integers to Sonyflake IDs.

• In CDP, hire_datetime is renamed to hire_time and leave_datetime to leave_time.

• The data quality calculation now defaults to 100 instead of 0 if there are no records. 

• All data on the data quality summary page is vertically aligned.

• The Audit modal in entity views is updated with the Search page activity view modal.

• The Content Delivery page is updated with a pop-up message when there are no dashboards to deliver.

• The Content delivery page is updated with the Deploy and Contact DataBee to Purchase buttons.

• The color of the sort icon is updated as it wasn't visible in the dark theme.

• Event time can now be updated by typing the value from the keyboard.

• The manager field is updated with a pivot functionality to that user's entity view along with a backtrace/audit trace icon to show the activity that caused the manager to be assigned to this user. 

• The visualization of the detection chain link tab is improved.

• Multiple chain link queries can now be added to the detection findings generated by detection chains.

• The status of all detection chain defaults is switched to have experimental status.

Bug Fixes

• Date string formats throughout the ETL pipeline have been aligned. 

• The issue with the active flag logic not matching the query directly against OCSF device/user tables is fixed.

• The duplicate entries in the organization_hierarchy CDP are fixed.

• Invalid catalog error while providing a valid connection configuring DataBricks is fixed.

• The issue where detection chain edits are not reflected until page reload is fixed.

• The issue where the event timeline displayed an error while loading events from the device owner is fixed.

• In the entity view details page, under the Event timeline section, when the download event history button is clicked, the issue with the improper file name is fixed.

• The issue where the related entities graph did not display the duration time sequentially is fixed.

• The invalid error message format in Detection chains configuration is fixed.

• The issue where the Selected Owner value not being displayed in the search and entity view pages is fixed.

• The issue where the Databricks and Snowflake images appeared squished in the Safari browser is fixed.

• The issue where the lookups from the detection finding search page can't find their entity to pivot to is fixed.

• The issue where the JSON key field auto-suggestions are not displayed is fixed.

• A bug in editing the existing detection chain links is fixed.

• An issue causing the creation of duplicate entities in the entity tables is fixed.

• The issue where a warning message appears while having Multiple Independent URLs is fixed.

• The issue where existing API ingest data sources could not be reconfigured is fixed.

• An issue in various data sources when trying to publish messages to the DLQ is fixed.

• The issue causing unauthorized error while adding a public GitHub repository in the rules management page is fixed.