Release notes-Release 88059

Release notes-Release 88059

September 06, 2021

This release includes the following features and enhancements:

Cloud

Enhancements

  • AWS integration by using Terraform script.
  • Real-time alerts for AWS events by fetching Cloudtrail events from Amazon Kinesis Data Firehose.
  • Lookup tables support to detect unknown events triggered by the Cloudtrail fields - eventName, awsRegion, sourceIpAddresses, userAgent, and imageId.

Platform

Enhancements

  • Uptycs documentation includes a list of supported compliance rules and their descriptions.

Compliance

Enhancements

  • Support to monitor, scan and configure the Kubernetes compliance by using four different tabs - Overview, Schedule Scan, Exceptions, and Configuration.
  • Support for ISO-27000/1 compliance standard for macOS endpoints.
  • Additional options to download CSV files from the Host Compliance Overview section.
  • Parameters support for the cloud compliance manager to classify the checks into three categories:
    • Manual: Uptycs never evaluates the checks with this parameter
    • Exception: Uptycs stops evaluating the checks with this parameter and marks them as compliant
    • Supported: Uptycs supports and evaluates the checks with this parameter

API

Added/enhanced the following APIs.
API
Description
/overview/overviewCombined
/overview/detections
/overview/hostCompliance
Provides the Main dashboard overview.
/fim/actionsDetected
/fim/totalEvents
/fim/processFileEvents
/fim/profilesAssets
/fim/profilesTags
/fim/assetsEvents
/fim/filesEvents
Provides the FIM dashboard overview.
/threats/technique
/threats/hostsTable
/threats/eventsTable
/threats/hostCompliance
/threats/detectionsGrouped
/threats/overviewCombined
Provides the Threats dashboard overview.
/vulnerabilities/assets
/vulnerabilities/assetsCvssScore
/vulnerabilities/assetsTable
/vulnerabilities/assetsTop10
/vulnerabilities/packagesTop10
Provides the Vulnerabilities dashboard overview.
/macHealth/macAssets
/macHealth/filevaultTrue
/macHealth/filevaultFalse
/macHealth/firewallFalse
/macHealth/firewallTrue
/macHealth/gatekeeperFalse
/macHealth/gatekeeperTrue
/macHealth/remoteDisabledFalse
/macHealth/remoteDisabledTrue
/macHealth/screensharingFalse
/macHealth/screensharingTrue
Provides the MacHealth dashboard overview.


Known Issues

  • Kubequery does not respond to real-time queries executed after the creation of 1500 pods.
  • Auto upgrade from the Assets management page is currently not supported for the following osquery agents deployed using yaml files:
    • Farquery on AWS Fargate
    • DaemonSet on GCP / AKS / EKS / generic Kubernetes