Cyware Orchestrate

Orchestrate has been significantly upgraded with a number of new and powerful capabilities. These capabilities include:

Previously, for every customer environment, there was a need to manually deploy and integrate various third party apps that were required for the various security orchestration and automation solutions.

Today, with the introduction of Cyware’s online Appstore, users can explore a plethora of apps that will assist you in comprehensive threat data collection, prioritization, and various other analytics.

There are two tabs available under the Apps page:

Orchestrate also extends the ability to build your own custom apps to suit any specific business needs.

Build your own custom apps using python code to suit your specific security operation. This is important especially when you want to create your own apps to target a specific purpose in your security process. You can uninstall the custom apps at any point as long as they are not associated with a Playbook.

Updating an app is now made simpler and faster with the availability of over-the-air updates for the Appstore apps. If there is an update to the app, the newer versions are listed with a version number, release date, and the corresponding release notes.

Orchestrate offers an easy-to-use Playbook canvas to help you build logical workflows for your orchestration needs. Define your workflow in this canvas using a simple drag-and-drop facility of all the supported nodes (Action, Condition, Input, and Memory). You can also configure the overview of the Playbook, schedule the Playbook, and perform other supported Playbook configurations in the same view.

References:

For a video tour of the Playbook Canvas, watch this video.

For a better user onboarding process, we have now integrated guided walkthroughs for key features of Orchestrate. We have also embedded some high-quality product video tutorials that you can refer to at any point for a better product experience.

A typical walkthrough will include an interactive demonstration of using that feature by clicking the Next button.

Previously, the ability to filter Playbooks and Apps was limited and was available along with the Search option. In order to make it super easy for you to search and list filters of interest, support for custom and quick filters are now available for Playbooks, Apps, and Run Logs. You can also save the filter selection for future use.

Filters in Apps

You can filter apps based on Category, Agent Compatibility, Installation Date, Custom or System Apps, Owner, and App Status.

Filters in Playbooks

You can filter Playbooks based on Schedule, Bookmark Status, Created and Modified By, Labels, Tags, Apps, Actions, Status, and Recent Updates.

Filters in Run Logs

You can filter Run Logs based on Playbook Run Status, Playbook Status, specific Playbooks, Apps, Actions, Run by User, Playbook Type, and Date Range of Run. You can also apply various filters on Run Logs to view Run Logs of only the Master Playbooks or include the Run Logs for the Sub-Playbooks as well.

Experience a whole new revamped version of the Playbooks feature with a powerful and easy-to-use Playbook canvas. It offers a simple drag-and-drop feature to add various elements or nodes to develop logical workflows for your orchestration needs. You also have the ability to import Playbooks (that are developed externally or may have been exported previously) to your environment, and then customize it. You now have two tabs available under Manage Playbooks:

References:

For a video tour of the Playbooks feature & to understand the supported functionalities, watch this video.

Playbooks Usability Enhancements

The Playbooks user interface has been significantly upgraded. We have redesigned this feature to provide a brighter and cleaner workflow with a complete focus on navigability, user experience, and ease of use.

You can view Playbooks in a list view or a grid view. You can customize the fields displayed on the details page (except the mandatory fields).

For each Playbook, you can view statistics such as the number of associated Playbooks, number of Run Logs available, and associated apps and actions.

Table View

Grid View

Users can view apps both in a table view and a grid view. For every app, you can view the version, description, available actions, instances, and associated Playbooks if any. From this view, you can also export the app package, clone, or uninstall an app. You can uninstall apps as long as they are not associated with any Playbook. The apps uninstalled from the AppStore remain visible and simply reverts to the Install status.

Table View

Grid View

Some of the other enhancements available for Apps are:

Playbooks also offer a Run Logs feature that helps you analyze the execution details of a Playbook, especially the run details for each node that is defined in the Playbook workflow. This is especially helpful for debugging purposes. You can also apply various filters on Run Logs to view Run Logs of only the Master Playbooks or include the Run Logs for the Sub-Playbooks as well.

You can choose to view Run Logs for a specific Playbook from the Manage Playbooks page, or view Run Logs for all Playbooks.

The user interface and experience (UI/UX) for Orchestrate has been upgraded extensively. Each of these enhancements creates a consistent experience to access and use objects in the application.

Left Navigation Menu Enhancements

The left navigation menu has been enhanced with the following changes:

Docker Changes in Deployment

Orchestrate Deployment and Expansion is now even more simpler and easier. In the 3.0 version, we have made tremendous progress with respect to Dockerization. By following Docker swarm guidelines, the deployment and expansion are now going to be easy and simpler.

User Profile

The User Profile gives you a holistic view of your personal information and activities.

To access this functionality, in the top-right corner, click the Profile icon, and select Profile Settings. You can view all the personal information, associated user groups, and option to change the password.

Bug Fixes

This release also incorporates a few minor bug fixes and security updates.

This section contains the list of connectors that are integrated with the Orchestrate application in the latest releases.

The following newly added connectors are integrated with Orchestrate in this release:

The following connectors are enhanced with new actions or bug fixes in this release: