Skip to main content

Cyware Fusion and Threat Response

Release Notes 3.3.2

September 15, 2023

We are excited to introduce you to the latest version of Cyware Fusion Threat Response (CFTR) v3.3.2. This release includes a few enhancements, a new API, and minor bug fixes.

Automation Management Enhanced

Automation Management feature is enhanced to enable administrators to create and associate automations with specific phases of incident workflows. When incidents are created, users can run automations that are associated with the ongoing phase of an incident, thereby accelerating the incident response.

Automation_Phase.png

For more information, see Configure Automation and Run Automation.

Reset Follow-up Notifications Enhanced

Notice

The Notification SLA feature has been renamed to Incident Notification and is available under Admin Panel > SLA > Process.

The Incident Notification process is enhanced to allow administrators to reset the follow-up notifications after the assigned user of an incident receives a response from the impacted business units. This enhancement enables users to resend follow-up emails to request additional information from the business units of the incident.

2023-09-05_11-33-48__1_.gif

For more information, see Configure Incident Notification Process and View Incident Summary.

Incident Playbooks Enhanced

  • Users are now informed via the application notifications about Orchestrate playbooks that require input data for execution. Users can easily access playbooks from the notifications and pass input from CFTR without signing in to Orchestrate.

  • The right sidebar of incidents is enhanced to alert users and access Orchestrate playbooks that require input data for execution.

Other Enhancements

  • In merged incidents, when the parent incident is closed, the closure comment and closure note are automatically added to the child incidents. This ensures the closure of child incidents with relevant comments and notes.

  • The Version and License feature in CFTR is enhanced for Managed Security Service Providers (MSSPs) to streamline the efficient administration of resources, such as incident creation and more. For more information, see Manage License.

Open API Enhanced

A new API (POST Advanced Search for Modules) has been added to enhance the capability to search for specific entries of a module using query parameters, field values, and a logical operator. For more information, see CFTR API Reference.