/* * These styles apply ONLY to the header and footer assets. */ a { -webkit-font-smoothing: antialiased; } .userContent .tableWrapper table { background: white; } #titleBar { display: none; position: absolute; } .ask-j1-header { position: relative; /* height: 77px; */ overflow: visible; z-index: 9; } .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .ask-j1-header_menu .menu-item a.active { color: #8C9EFF; } .ask-j1-header-container .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper #SiteNav .filter-dropdown:first-of-type { max-width: 145px; } .ask-j1-header-container .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper #SiteNav .filter-dropdown:nth-of-type(2) { max-width: 170px; } .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper .filter-dropdown a { text-decoration: none; } #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown.site-nav--active .site-nav__link { text-decoration: underline; } .ask-j1-menu-container .submenu .site-nav__link.active { color:#8C9EFF !important; text-decoration: underline !important; } .ask-j1-menu-container .submenu .submenu-items.d-flex { /* display: none !important; */ } .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .ask-j1-header_menu .menu-item a { text-decoration: none; -webkit-font-smoothing: antialiased; } .ask-j1-header-container .ask-j1-menu-container .submenu { z-index: 1; } * { padding: 0; margin: 0; box-sizing: border-box; } .footer { background: #f5f5f6; color: #555a62; font-size: 14px; line-height: 1.5; padding: 18px 0; } .footer-wrap { padding-left: 18px; padding-right: 18px; max-width: 1236px; margin: 0 auto; } .footer a { color: #0291db; } .footer a:hover { color: #0276b3; } .footer-row { display: flex; flex-wrap: wrap; justify-content: space-between; align-items: center; margin: -3px; } .footer-col { padding: 0 3px; } .footer-col-copyRight { justify-content: flex-start; } .footer-col-logo { justify-content: flex-end; } .footer-col-copyRight, .footer-col-logo { flex: 1; display: flex; } .logo { width: 120px; height: 28px; opacity: 0.6; } @media screen and (max-width: 768px) { .footer-row { display: block; } .footer-col { width: 100%; text-align: center; margin: 6px 0; } .footer-col:first-child { margin-top: 0; } .footer-col:last-child { margin-bottom: 0; } .footer-col-copyRight, .footer-col-logo { justify-content: center; } .logo { margin: 0 auto; } } #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { display: flex; align-items: center; } @media screen and (max-width: 1101px) and (min-width: 871px) { #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { font-size: 18px; } #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { margin: 0 10px 0 0 !important; padding-right: 10px !important; } .ask-j1-header-container .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper #SiteNav .ask-j1-header-container .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper #SiteNav .filter-dropdown:first-of-type { } .ask-j1-menu-container .submenu .submenu-items { margin-left: 0px !important; } } @media screen and (min-width: 1101px){ #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { font-size: 16px; } } @media screen and (max-width: 871px) { #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { font-size: 12px; } .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper { margin-left: 4px !important; } #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { margin: 0 5px 0 0 !important; padding-right: 5px !important; } .ask-j1-menu-container .submenu .submenu-items .search .search-input { width: 100% !important; } .ask-j1-menu-container .submenu .submenu-items { margin-left: 6px !important; } } @media screen and (min-width: 1100px) and (max-width: 1330px) { #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { font-size: 16px; } #shopify-section-header .ask-j1-menu-container .submenu .filter-dropdown-wrapper .site-nav-hs .filter-dropdown { margin: 0 24px 0 0 !important; padding-right: 24px !important; } .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper { margin-left: 8px; } .ask-j1-menu-container .submenu .submenu-items { margin-left: 4px; } } @media screen and (max-width: 800px) { .ask-j1-header .ask-j1-header-container.menu-active .ask-j1-menu-container .ask-j1-header_navigation { z-index: 9; position: relative; background: white; } } .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper .filter-dropdown:not(:last-child):after { height: 100%; } @media screen and (max-width: 1100px) and (min-width: 870px) { .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper .filter-dropdown:not(:last-child):after { top: 0px !important; } } @media screen and (max-width: 870px) { .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper .filter-dropdown:not(:last-child):after { height: 16px !important; } } @media screen and (max-width: 800px) { .ask-j1-header .ask-j1-header-container.menu-active .ask-j1-header-logo-mobile { /* padding: 12px !important; */ } /* .ask-j1-header .ask-j1-header-container.menu-active .ask-j1-menu-container .ask-j1-header_navigation { padding: 50px 20px 20px !important; } */ } .ask-j1-menu-container .submenu .submenu-items .filter-dropdown-wrapper .filter-dropdown a { font-family: "Lato", sans-serif; } .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .ask-j1-header_menu .menu-item:first-of-type a{ color: #8C9EFF !important; } .remove-first-active .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .ask-j1-header_menu .menu-item:first-of-type a{ color: #fff !important; } .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .ask-j1-header_menu .menu-item{ display: flex; } #shopify-section-header .ask-j1-menu-container .submenu .submenu-items .search form button img{ width: 18px; } .ask-j1-menu-container .submenu .submenu-items .search { width: 276px !important; border-radius: 3px; } .ask-j1-menu-container .submenu .submenu-items .search form { width: 100% !important; justify-content: space-between !important; } .ask-j1-menu-container .submenu .submenu-items .search form >input::placeholder, .ask-j1-menu-container .submenu .submenu-items .search form >input { padding: 5px 0 6px !important; letter-spacing: 0.15px; font-family: Lato; font-style: normal; font-weight: normal; -webkit-font-smoothing: antialiased; font-size: 16px; } .ask-j1-header-container .ask-j1-menu-container .submenu-items a:hover, .ask-j1-header-container .ask-j1-menu-container .ask-j1-header_navigation .menu-item a:hover { color: #8C9EFF !important; } .ask-j1-header-container .ask-j1-menu-container .submenu-items a:hover { text-decoration: underline !important; } @media screen and ( min-width: 760px ){ #shopify-section-header .ask-j1-header-container .ask-j1-header-logo .atmc-header_logo img { height: 108px !important; } } @media screen and ( max-width: 800px ){ #titleBar { display: none !important; } } /*# sourceMappingURL=styles.css.map */

Release Notes

JupiterOne 2019.15 Release

2019-01-07

New Features

Graph mode for the search/query results in Landing Zone is now available!
You can switch to Graph mode for any search or query to get a focused visual
or the entities and relationships from the results. The graph is interactive
so that you can further expand for deeper analysis.
Much improved Search in Landing Zone that allows all of the following
modes in one place:
1. Keywords search to ask saved/packaged questions
2. Full text search across all entities based on their property values
3. JupiterOne query language (J1QL) for precise querying of entities and relationships
4. Combining full text search with J1QL
New ingestion and analysis from AWS:
- S3 Bucket ACL processing and access mapping
- S3 Bucket public access block configuration
- Account password policy
- IAM User MFA devices and access keys
Added OR operator support on relationship keywords in J1QL. For example:
Find HostAgent that (PROTECTS|MANAGES|MONITORS) Host
Condensed quick filter by entity class icons in Asset Inventory app.
You can edit or delete an entity manually from the Asset Inventory app.
Web links are added to most entities ingested, allowing you to directly
open in a new tab to view the resource in the source web console.
Added linking to Geolocation lookup of IP Address and CIDR of a Host or
Network.
New packaged questions and queries added:
- [general] What are my information assets?
- [general] What are my production data stores and databases?
- [general] What are my production resources?
- [general] What are my production applications?
- [general] Which devices have been disposed in the last 12 months?
- [access] Who has been assigned permissions with 'Admin' access?
- [access] Who owns which user accounts?
- [access] What are the shared/generic/service accounts? (user accounts that are not individually owned)
- [access] Show me the current password policy and compliance status.
- [access] Find anything that allows public access to everyone.
- [appdev] Were there any Code Repos added in the last 24 hours?
- [data] Is my production or PHI/PII data stores encrypted?
- [data] Are there any non-public data stores incorrectly configured with public access to everyone?
- [endpoint] What is the configuration and compliance status of my endpoint devices?
- [endpoint] Whose endpoint is out of compliance?
- [endpoint] Is there malware protection for all endpoints?
- [endpoint] Are there security agents monitoring and protecting my endpoint hosts/devices?
- [endpoint] Are my servers and systems protected by hosted-based firewall?
- [infra] Are there potential IP collisions among the networks/subnets in my environment?
- [infra] What are directly connected to the Internet?
- [infra] What network traffic is allowed between internal and external networks?
- [infra] Is there proper segmentation/segregation of internal networks?
- [infra] Are wireless networks segmented and protected by firewalls?
- [infra] Are there VPN configured for remote access?
- [infra] Show all inbound SSH firewall rules across my network environments.
- [infra] Is inbound SSH allowed directly from an external host or network?
- [aws] Is MFA enabled for the Account Root User for all my AWS accounts?
- [aws] Are there root user access keys in use for any of my AWS accounts?
- [aws] Is public access block configured for non-public S3 Buckets?
- [aws] Is public read access enabled for any S3 Bucket?
- [aws] Is public write access enabled for any S3 Bucket?
- [aws] Is S3 bucket access granted to anybody outside of the account?
- [aws] Is there any S3 bucket that grants full control access to anybody other than the owner?
- [aws] What are the service roles in my AWS accounts (i.e. an IAM Role that has a trust policy to an AWS Service)?
- [aws] Are all EBS volumes encrypted?
- [aws] Is default server side encryption enabled for all S3 Buckets?
- [aws] Who has been assigned full Administrator access?
- [aws] Are there assume role trusts to external entities?
- [aws] Are all the AWS Config rules complaint? (if AWS Config service is enabled)
- [aws] Are there any noncompliant production resources in AWS per Config evaluation? (if AWS Config is enabled)
- [aws] Are there EC2 instances exposed to the Internet?
- [aws] Which EC2 instances may have external network connections?

Improvements and Bug Fixes

Improved username display next to the user avatar.
UI/UX improvements on Landing Zone search, with Clear, Save, and
Clear All action buttons for query results.
Improved accuracy of full-text search.
Fixed missing column in some query/search results.
Fixed account name tagging not enabled by default in certain integration
configurations.
Several stability and robustness improvements on backend services.
New icons for several entity classes.