RELEASED BUILDS

  • Production: Precinct-3tier-155, Precinct-3tier-159

Builds published to WitFoo Library at 6/28/2018 0800 (CST) due for automatic installation at 6/28/2018 0805 (CST)

FEATURES

  • Role Based Access Control
  • SAML Authentication
  • Active Directory Authentication
  • Data Sensitivity separation and control
  • Incorporation of business metrics (FTE, $) into Operations Report
  • Disruption detection on uni-directional (blocked) network transactions
  • List of hosts sending Artifacts to Precinct listed on Tool Report
  • Integration with secure syslog-forwarder
  • Precinct can now be deployed in Amazon Web Services (AWS)

INTEGRATIONS

  • Radware Web Application Firewall
  • SourceFire eStreamer
  • Azure AD
  • Apache Logs
  • Amazon Cloudwatch
  • Cisco Stealthwatch 6.10
  • Suricata
  • ProofPoint Emerging Threats

IMPROVEMENTS

  • Enhanced Operations Report
  • Enhanced Tool Report
  • Performance tuning for disk I/O rates
  • Performance tuning on Splunk queries
  • Enable TLS transport for Beats agents
  • NDB Upgrade from 7.5 to 7.6.6
  • NDB Memory optimization
  • Elasticsearch Memory Optimization
  • Improved Tool metric calculations
  • Curator from 5.5.1 to 5.5.4
  • ElasticSearch from 6.2.4 to 6.3.0
  • Logstash from 6.2.4 to 6.3.0
  • Kibana from 6.2.4 to 6.3.0
  • Free-form search available on search page

BUG FIXES

  • Deactivate user did not always work correctly
  • Cases did not inherit disrupted status from incidents
  • Vulnerability allows multiple admins to be created
  • Tool report would not load in systems with large data sets (more than 100,000 hosts)
  • Licensing calculator did not work in deployments without asset databases
  • TAXII processing could crash with unexpected returns from feed

RSS Feed for release notes is: https://community.witfoo.com/category/release-notes/feed/