New features and enhancements
- Select user language preference: Users can now choose whether to display the Platform’s user interface in English or Japanese. The language selector is visible within the user menu. (PRTL-4604)
- Export defender logs: Now, exports of the event’s defender logs include all the individual user comments within tickets. (PRTL-4606)
- Download ticket correlations: Use the new Ticket Correlation button to download the indicators of compromise (IOC) that match that defender ticket as a CSV file. (PRTL-4617)
- Clean OVA uploads: The new Remove button enables Portal Administrators to clear failed virtual machine OVA uploads from the VM Template Upload screen. (PRTL-4620)
- Additions to the content catalog: An expansion to the content catalog now includes additional work roles: SOC analyst, incident responder, threat hunter, forensic analyst, malware analyst, threat intel analyst, application security engineer, penetration tester, red teamer, vulnerability analyst, cybersecurity manager, and OT cybersecurity engineer. (PRTL-4692)
Fixes
- Change content organization: As a Portal Administrator editing content or a network item, changing to the assigned organization change didn’t save as expected. Now, changes to the organization save. (PRTL-716)
- Edit circuits: As an Organization Administrator editing a circuit, selecting View Details for a structured content plan generated an oops error when you didn’t have view access but still added it to that circuit. The system now displays a clear message that states you have insufficient access privileges to view that record’s details. (PRTL-2878)
- Export clone sources: As an Organization Administrator viewing clone sources from within a network specification, exports weren’t possible when a clone source didn’t have a reference to either a content module or a deployment. Now, exports are always possible regardless of the references present. (PRTL-3260)
- Delete deployment target: Portal administrators were unable to delete a deployment target due to a 500 series server error that occurred but wasn’t displayed to them. Deletions now complete successfully for deployment targets. (PRTL-4113)
- Save file management links: A clarification to the onscreen text now states that file download links are one-time use only. (PRTL-4486)
- Status of deployments: Performance improvements ensure that virtual machine deployment statuses are accurate and remain in synchronization with their server statuses. Before, deployed virtual machines improperly showed “Not Deployed” when they were actually deployed. (PRTL-4605)
- View event documents: Pagination and scrolling is now available when viewing greater than twenty documents within the Event Documents of live action events. Previously, only twenty documents displayed without any scrolling or pagination options. (PRTL-4681)
- Add SCP to External Library: Uploading a structured content plan to the external library failed when the clone source folder field was left blank in the deployment target’s configuration. Now, the process uses the root of the datacenter path when the clone source folder is blank. (PRTL-4694)
- Various back-end and API endpoint improvements: Back-end components have updates to help improve compatibility, interoperability, and other functions. (PRTL-4663, PRTL-4668)
