Skip to main content

Release Notes 3.7.0

July 24, 2024

We are excited to introduce you to the latest version of Intel Exchange v3.7.0. This release includes a few enhancements and new integrations.

Threat Data Enhanced

The threat data object details now include the following enhancements for an intuitive user interface:

  • The Basic Details section of the Overview tab has been replaced with the Key Details section. The Key Details section now provides essential information about the object aggregated from various sources that reported the object.

  • The Sources section in the Overview tab lists the sources based on the source modified date instead of the source created, enhancing the ability to analyze threat data effectively.

    Overview.png

  • The Basic Details tab is now renamed as the Analysis tab. This tab consolidates all analyst-related details such as analyst description, custom scores, source details, and more. This update enables you to analyze source details and update the analyst scores and the analyst description from the same page.

    Analysis.png

  • The Relationship Details section now includes All, Forward, and Reverse tabs that display forward and reverse relationships of an object, allowing you to identify the related objects that impact or are impacted by the current object.

    Relations.png

  • In Relationship Details, the limit to view 10,000 relations is now removed in the table view, allowing you to view all the relations of the threat data object without any restriction.

For more information, see Threat Data Objects.

Other Enhancements

  • When creating intel using Quick Add Intel, if Apply Metadata to all Objects is not selected, the title of the report object created as part of the quick add submission is used as the description for all objects. For more information, see Quick Add Intel.

  • When creating CFTR incidents from report objects or published threat bulletins, the related objects of the report and the objects mentioned in the bulletin are automatically associated with the incident as Connect the Dots components. For more information, see Create an Incident in Respond with Intel Exchange.

Integrations

The following integrations are now supported in Intel Exchange:

  • SpyCloud (Enrichment Tool): This integration with the SpyCloud Consumer ATO Prevention tool allows you to retrieve breach and malware data into Intel Exchange for an accelerated threat investigation. For more information, see SpyCloud.

  • Pangea (Enrichment Tool): This integration with Pangea Cloud enables you to retrieve comprehensive threat intel about indicators of compromise (IOCs). For more information, see Pangea.