Releases
v1.9.6
Maintenance and bug fixes
Latest
Alerts
./run all
now runs data connectors, then violations, then alerts
deprecated baseline runners and scripts are removed (cf3bc6d , 972c5cd )
a rule may now declare a single handler without wrapping it in an array (972c5cd )
Data Connectors
fix bug in AWSIC running on latest EKS in #425 (ty @edulop91 )
AWSIC now records config describe-configuration-recorders
results for all available regions (2844b94 )
AWSIC now respects AWS rate limits for Get requests (2844b94 )
AWSIC now handles ServerTimeout errors (no response in 60 seconds) gracefully (2cf48eb )
fix bug in Jira correlation logic
add custom Jira starting status via environment variable JIRA_STARTING_STATUS
JAMF and AzIC scheduling code are moved to generic system via table comments
fix Azure log to work for with additional log types in 947c394 (ty for #414 @Chaitali-Sonparote )
minor cleanup of AzIC in 5ccc0f4
minor fix from gsuite API change e8a58e5
Okta connector can now use a custom domain and includes a pack for initial data cleanup
Jamf now handles large inventory sizes better in 5e55b8e
Packs
Bug fix in snowflake_security_monitoring in a3ad191 (ty to Intact Financial Corporation for the report & fix)
Basic Okta structures around ingested data (b05fa92 )
Handlers
fix bug in Jira correlation logic #424
rules can now send arbitrary payloads to ServiceNow handler in bbbb4c2
Jira handler works with single string source as well as list of multiple sources, and can now link alerts types to a triage repository (2d345aa )
SMTP handler can now pass host, user, port, and password as params (d452139 )
WebUI
fix minor UX bugs and bump dependencies with security detections (425cdb6 )
Deprecate Ingestion Scripts
ZenGRC is decommissioned and will be re-introduced as a pack in a future version (#436 )
Agari have been decommissioned without plans for re-introduction (79c3702 )
You can’t perform that action at this time.