Log360 UEBA Release Notes

  • Build 4026 Released on 10 March, 2021

    Enhancement

    1. Ability to add notes about users and entities: Security analysts can now select any user or entity from the Users' or Entities' Dashboard, and add or update notes about them. The analyst entering the note and the timestamp will also be recorded. Notes help the security team to document and share their findings.
  • Build 4025 Released on 5 February, 2021

    Security Enhancement

    1. Protection from erroneous product updates: To protect against an erroneous or malicious PPM file from being applied during product updates, PPM and DLL signing will now be performed. This will enhance security and integrity.
  • Build 4024 Released on 1 February, 2021

    New Features

    1. Anomaly visualization: Users can now see a graphical representation of every analyzed anomaly. This will show how far apart the observed values are from the expected values.
    2. Hiding users and entities from dashboard: Specific users and entities can now be hidden from the dashboard. This may be used in cases where a user or entity is deemed to be trustworthy.
    3. Logon anomalies: Anomaly details and risk scores will now be provided for logon anomalies, a new category of threat.

    Enhancements

    1. Apache struts framework is no longer used: Vulnerability caused due to Apache Struts has been fixed (Apache Struts dependency has been removed).
    2. Analysis of anomalous events in bulk: The solution now supports the analysis of anomalous events in bulk rather than as single events. This will translate into improved performance.
    3. Improved design for exported reports: All anomaly reports exported as HTML, XLS and PDF files will now feature a new and improved design.
  • Build 4023 Released on 26 November, 2020

    New Features

    1. PAM360 Integration: Log360 UEBA now integrates closely with ManageEngine PAM360 to analyze anomalies in privileged accesses.
  • Build 4021 Released on 26 October, 2020

    New Features

    1. Elasticsearch (ES) Archiving: Users now have the option to archive already detected anomalies in compressed index files for a period of their choice. This will improve storage utilization.
    2. RunQuery for querying database: Users can now query the Log360 UEBA database by executing runQuery.do on the system that runs Log360 UEBA.

    Enhancements

    1. Greater visibility of data during the UEBA training period: The dashboard during the initial UEBA training period will now feature more insights into network activity.
    2. XLS and HTML format for export: Users can now export reports into XLS and HTML formats, apart from PDF and CSV formats.
    3. AD thumbnail photo sync for users profile picture: The users' photo stored in the ThumbNailPhoto attribute in AD can now be displayed along with their risk scores. This photo will be made available due to a sync with Active Directory.
    4. Memory update: The memory allocated to the product and ES can now be updated from the product settings tab.
  • Build 4020 Released on 20 June, 2020

    New Features

    1. Alerts: Real-time email notifications can now be sent for detected anomalies and high risk scores.
    2. Global Search: Users can now search across all sections of the UEBA component including reports, settings, and the help documentation for the required details.

    Enhancements

    1. Manage Reports: Management of categories, groups, and reports is now easier with the Manage Reports option.
    2. Option to add log level filters to set the severity level for the logs collected.
  • Build 4016 Released on 17 May, 2020

    Fix

    1. The authentication bypass vulnerability (CVE-2020-24786), identified by Florian Hauser, has now been fixed.
  • Build 4015 Released on 29 April, 2020

    Features

    1. Risk score customization: Risk score can now be customized based on the extent of deviation from the baseline of the regular activities of a user, and also the requirements of the organization.
    2. Cloud Security Plus integration: Integrated with Cloud Security Plus to ensure real-time monitoring of your cloud platform.

    Enhancements

    1. Enhanced reports page: You can now select the desired device from the drop-down and get advanced reports for them. Additionally, few new reports have also been included.
  • Build 4011 Released on 13 November, 2019

    New Feature

    1. Active Directory-based authentication: Users can now log into the Log360 UEBA console using their Active Directory domain credentials.
  • Build 4010 Released on 23 September, 2019

    New Features

    1. Spot anomalies in AD activities including logons, user activity, account lockouts, and more.
    2. Schedule reports: Reports can be scheduled to be generated at specific intervals and emailed to stakeholders or stored at a specified location.
    3. The UEBA module supports Chinese and Japanese.

    Enhancements

    1. The performance of the machine learning algorithms have been enhanced with Redis.
    2. Support of Microsoft SQL Server as the backend database.
    3. The dashboard has been enhanced for better user experience.