Skip to main content

Cyware Situational Awareness Platform

Release Notes 3.8.3

August 5, 2024

We are excited to introduce you to the latest version of Collaborate v3.8.3. This release includes several enhancements.

Member Portal Enhancements

  • You can now configure and set your default two-factor authentication (2FA) method after you sign in to the Member Portal. This allows you to conveniently manage your 2FA settings from your profile. For more information, see Member Profile.

  • Analysts can now add you as a follower to published Intelligence Requirements (IRs). You will receive email notifications when you are added as a follower, ensuring you stay updated on relevant IRs. 

  • In the Intel Library, you can now share CQL queries with other members, enhancing collaboration.

  • The following enhancements are available in the Events module:

    • Collaborate now supports daylight saving hours for events. While submitting event requests, select the time zone and specify the event time. After the analyst publishes the event, the event time will automatically adjust for recipients based on the selected date, ensuring seamless scheduling across different regions.

    • Along with the event title, you can now view the event time in your events calendar, making it easier for you to track and manage your schedule effectively.

    • The alert email for events will now display the time zone selected by the analyst, providing clear timing information.

Analyst Portal
Alerts Enhanced

The following enhancements are available in the alert creation form:

  • Collaborate now supports a wider range of indicator types for alert creation, which includes SHA-224, SHA-384, SHA-512, ssdeep, file paths, windows registry keys, autonomous systems, directories, MAC addresses, email subjects, and email descriptions. To ensure these indicators are ingested correctly in Intel Exchange while posting alerts, upgrade Intel Exchange to v3.6.2.1.

  • In the Indicators section, when you enter and parse indicators of compromise (IOCs), they will now appear in the order you entered them. Furthermore, you can now view the total count and count by IOC type of the parsed indicators, enhancing the user experience.

    more_indicator_types.png

  • The additional filters that you select in the Recipients section will also appear in the Threat Assessment and Recommended Actions sections, providing you with enhanced visibility when assigning threat assessments and actions to recipients.

Import Members Using CSV Enhanced

While importing users from a CSV file, along with name and email, the file must now also include the organization and organization type of the users. 

After importing, you will now receive an email summarizing the import. If the import fails, the email will include a link to download a CSV file of failed records for review and update.

Dashboard Widgets Enhanced

You can now visualize and monitor alert, survey, and IR data in the Analyst Portal using the following new system widgets:

  • Alerts Shared with Organizations vs Category: Displays the number of alerts shared with different organizations by category.

  • Total IRs and IRs Matched with Alerts by Category: Displays the total number of IRs and IRs matched to an alert by category.

  • Closed and Published IRs vs Category: Displays the number of published and closed IRs by category.

  • Submitted and Published Surveys vs Organizations: Displays the number of surveys submitted and published by different organizations.

Other Enhancements

  • Collaborate now supports activating multiple authentication methods for the Analyst Portal, ensuring users can always access the application, even if one of the authentication methods becomes unavailable.

  • While creating or editing recipient groups, you can now specify whether members can directly share intel or Request for Information (RFI) with other members of the same group. This allows you to limit members' ability to share intel and RFIs within the group, ensuring appropriate information distribution. For more information, see Create Recipient Group.

  • You can now add followers to published Intelligence Requirements (IR) based on recipient groups and individual recipients, ensuring members stay up to date with relevant IRs. For more information, see View All Published IRs.

  • Collaborate now supports daylight saving hours for events. While scheduling an event through an alert, select the time zone and specify the event timing. The event time will adjust automatically for recipients based on their local time zones, ensuring event times are accurately reflected for all the recipients.

Open API Enhancements

  • The Alert Feedback API ({{server}}csap/v1/alert_feedback/) is introduced for members to submit feedback for alerts using the alert ID. For more information, see Alert Feedback.

  • The RFI Response API ({{server}}csap/v1/create/rfi_responses/:alert_id/) is introduced for members to add responses to RFI alerts using the alert ID. For more information, see RFI Response.

  • The Upload Attachment API ({{server}}csap/v1/upload_attachment/rfi_responses/) is introduced for members to upload a file and retrieve its media ID for submitting attachments along with RFI responses. For more information, see Upload Attachment.

  • The IR List API ({{server}}csap/v1/irs/) is introduced for analysts to retrieve the list of IRs. For more information, see IR List.

  • The IR Followers API ({{server}}csap/v1/ir_followers/:ir_id/) is introduced for analysts to retrieve the list of followers of an IR using the IR ID. For more information, see IR Followers.

  • The Recipient Groups API ({{server}}csap/v1/list_recipient_group/) is now enhanced to return the intel and RFI submission permissions for the recipient groups. For more information, see Recipient Groups.