SenseOn Platform 5.19
Custom Detections lets you write, preview and manage your own detection rules, and you can start one straight from Hunt Lab. Resolve, SenseOn's autonomous investigation agent, now shows its verdict on every case it has investigated. The platform also loads faster when you first open it, Reveal charts gain a data point menu for copying values and baselines, and Data Connectors use clearer wording about the data they receive.
What's new
Resolve verdicts on your cases
Resolve, SenseOn's autonomous investigation agent, is now on for everyone. When Resolve has investigated a case, the case overview in Investigate shows its verdict and a summary of how it reached it. Select Learn more to see the MITRE ATT&CK techniques it identified and, where there is one, how similar detections have been resolved before.
- Custom Detections: create, edit and manage your own detection rules, with a preview in the form and a summary of the last run. A Create detection shortcut in Hunt Lab takes you straight there. Available to users with permission to manage detections, where Custom Detections is turned on for your organisation. Contact SenseOn to request access.
What's improved
- Performance: the platform loads faster when you first open it.
- Reveal: clicking a chart or table cell opens a data point menu to copy its value or baseline. Charts show a clearer message when they time out or have nothing to report.
- Data Connectors: clearer wording when there's no recent data, clearer labels for data fetched and received, and new icons for ThreatLocker and Darktrace Email.
- Hunt Lab: queries can use WITH clauses that mix values and sub-queries.
- Support Hub: a ticket is only created once you send your first message.