New features and enhancements
Navigation and range workflows
- Home page shortcuts and recent work: Use Jump Back In to return to recently viewed ranges, blueprints, sandboxes, team events, and courses. Search and resource-type filters help you find previous work, and quick actions show the tasks available to you. (SP-13086)
- Range Workbench home page: The redesigned Range Workbench home page provides a starting point for range and blueprint workflows. The Shared with Me view makes shared resources easier to identify. (SP-13087, SP-14103)
- Range status visibility: Range and virtual machine (VM) status displays provide clearer feedback during provisioning, configuration, and deprovisioning. (SP-11289, SP-12888, SP-13380)
- Discard unsaved blueprint edits: Select Discard Changes in the YAML editor to restore the last saved content without leaving the editor. A confirmation dialog helps prevent accidental loss of edits. (SP-12061)
- Independent editor views: Each browser tab keeps its own network designer view, so closing the YAML editor in one tab no longer closes it in another. (SP-12622)
Range Workbench and network designer
- Blueprint editing guidance: Blueprint workflows now make it clearer when users need to create a draft before editing a blueprint. (SP-10875)
- Provision range guidance: Network designer now provides additional explanation for provision options in the provision range dialog. (SP-10857)
- Range modification updates: Network designer and Range Workbench now include revisions to the exit button in range modifications and expose draft modified timestamps while users work in draft modification mode. (SP-11088, SP-11842)
- Cancel range provisioning: Network designer now includes support for canceling range provisioning. (SP-12839)
Individual Trainer and course management
- Course and module results: Review finalized scores, points, and activity results after completing a training session or course. Expand the Score Breakdown, filter for scored activities, and open Question Details to review responses and feedback where the course permits it. (SP-9676, SP-12597, SP-12598, SP-12599, SP-12601)
- Next training session: The Next Up row on a completed training-session summary lets you start, resume, or retry the next eligible module. Scheduled modules show their availability instead of starting early. (SP-12602)
- Range expiration and recovery: Training sessions warn you before a range expires. If it expires, you can continue reading instructional content and use Restart Range to restore VM access with a new range when permitted. (SP-11758, SP-13916)
- Catalog topic filters: Filter the training catalog by one or more topics, such as Threat Hunting, Splunk, and Network Forensics. Selecting multiple topics finds courses that match any selected topic.
- Reset range experiences: Individual Trainer now supports resetting learners’ ranges. (SP-11757)
- Question forfeit action: Learners can now forfeit rather than answer questions. (SP-12498)
- Leave-session confirmation: A confirmation dialog helps prevent accidentally leaving a training session. (SP-14140)
- Tables in course content: Course authors can add tables to rich-text content, and trainees can view those tables during training.
Team Trainer and user emulation
- Teams view: The updated Teams view improves the layout of teams and participants. Expanded team color options help distinguish teams. (SP-9675, SP-10339, SP-10167)
User emulation and attacks
- Impact maps expansion: Platform applications now include additional impact map support and shortest-path views. (SP-10862, SP-5770)
- Business Base blueprint updates: The Business Base blueprint now includes updated Windows 10, Windows 11, and Windows Server 2022 images, preloaded sample files for more realistic enterprise activity, and updated user emulation personas. Non-administrator users are no longer configured as domain administrators. (SP-11366)
- Attack scenario search: Attack workflows now support search and filtering by MITRE ATT&CK® for attack scenarios. (SP-10474)
Access control
- Access control groups: Users can now view and delete access control groups in the web user interface. (SP-5776, SP-5777)
Application programming interface updates
- Course range source picker: Course management includes a module range source picker dialog and endpoints for course management owned range clones. (SP-12336, SP-12337)
- Versioned course summaries: Course management now includes versioned course summary endpoints. (SP-12457)
Fixes
- Range modification capacity checks: Capacity-increasing modifications are checked before work begins. If the provider lacks capacity, the request returns an actionable error without changing the committed range design. (SP-13716)
- Subnet modifications: Successful range modifications apply updated subnet address ranges to the running range and replacement VMs. (SP-14194)
- VM shutdown: Power-off actions request a graceful guest shutdown instead of immediately cutting power. (SP-14065)
- Author filtering: Filtering blueprint and range lists by author no longer produces request errors for searches that match many users. (SP-14040)
- Blueprint validation feedback: Network designer displays overlay validation errors, including user emulation configuration errors, with other blueprint validation feedback. (SP-13116, SP-13996)
- Team participant filtering: Team filters return the expected participants, and filtering for event managers retains the teams those participants belong to. (SP-9717, SP-13371, SP-13920)
- Team tagging configuration: Team tagging configuration can now be turned off after it has been enabled. (SP-12541)
- Blueprint version author: Network designer now shows blueprint version author details. (SP-8460)
- Range creation without provisioning: Creating a range without provisioning no longer causes unexpected range states. (SP-10203)
- User emulation overlay validation: User emulation overlay blueprint validation no longer requires persisted blueprint authorization. (SP-12825)
- Manage access dialogs: Opening Manage Access for a range or blueprint no longer fails while access definitions are loading. Organization selection also works correctly in the sharing dialog. (SP-14652, SP-13895)
- User emulation recovery: A failure in one agent no longer stops sibling agents through the range lifecycle. Recovery handling also helps prevent user emulation from remaining stuck while stopping. (SP-12847)
- Completed training progress: Completed modules remain read-only, and deferred-feedback activities complete after all required questions have been submitted, even when unused retries remain.
- User emulation application prompts: Email activities handle the Outlook restore-session prompt, and Notepad activities support differences between Windows 10 and Windows 11. (SP-13907, SP-13900)
- Impact map access: Users with permission to view a range and its attack logs can view the associated impact maps. (SP-14124)
