Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
JupiterOne 2021.64 Release - AskJ1 Community
<main> <article class="userContent"> <p>2021-02-10</p> <h2 data-id="new-features">New Features</h2> <ul><li><p>Added additional compliance review periods (Bi-Monthly and Semi-Annually).</p></li> <li><p>Developed a sample dataset for use in a sandbox account for new J1 users to<br> learn and experiement with.</p></li> </ul><h2 data-id="integrations">Integrations</h2> <h3 data-id="sdk-and-pipeline">SDK and Pipeline</h3> <ul><li>Made various backend performance improvements to the data ingestion speed and<br> persister pipeline</li> </ul><h3 data-id="aws">AWS</h3> <ul><li><p>Added <code class="code codeInline" spellcheck="false" tabindex="0">objectOwnership</code> property to S3 bucket entities from S3<br><code class="code codeInline" spellcheck="false" tabindex="0">OwnershipControlsRules</code></p></li> <li><p>Set default <code class="code codeInline" spellcheck="false" tabindex="0">objectOwnership</code> to "ObjectWriter" on S3 buckets</p></li> <li><p>Added EKS Node Groups ingestion that creates <code class="code codeInline" spellcheck="false" tabindex="0">aws_eks_node_group</code> entities and<br><code class="code codeInline" spellcheck="false" tabindex="0">aws_eks_cluster_has_node_group</code> relationships</p></li> <li><p>Populated <code class="code codeInline" spellcheck="false" tabindex="0">nameservers</code> property on <code class="code codeInline" spellcheck="false" tabindex="0">aws_route53_domain</code> entities</p></li> <li>Fixed error handling to expose meaningful <code class="code codeInline" spellcheck="false" tabindex="0">AuthorizationError</code> to users</li> </ul><h3 data-id="azure">Azure</h3> <ul><li><p>Support for ingesting Diagnostic Settings entities and relationships:</p> <ul><li>Azure Container Registry</li> <li>Azure API Management Services</li> <li>Azure CDN</li> <li>Azure Event Grid Domain and Azure Event Grid Topics</li> <li>Azure Batch Account</li> </ul></li> </ul><h3 data-id="bamboohr">BambooHR</h3> <ul><li>Added the <code class="code codeInline" spellcheck="false" tabindex="0">supervisor</code> property to support mapping employee entities to managers</li> <li><p>Added some grace to namespace configuration to allow for<br><code class="code codeInline" spellcheck="false" tabindex="0">jupiterone.bamboohr.com</code> and <code class="code codeInline" spellcheck="false" tabindex="0">https://jupiterone.bamboohr.com</code> as well as<br><code class="code codeInline" spellcheck="false" tabindex="0">jupiterone</code></p></li> <li><p>Fixed authentication validation check that failed when there is no employee <code class="code codeInline" spellcheck="false" tabindex="0">0</code></p></li> </ul><h3 data-id="google-cloud">Google Cloud</h3> <ul><li>Added support for ingesting the following <strong>new</strong> resources:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>Cloud SQL</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_sql_mysql_instance</code></td> </tr><tr><td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_sql_postgres_instance</code></td> </tr><tr><td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_sql_sql_server_instance</code></td> </tr><tr><td>BigQuery</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_big_query_dataset</code></td> </tr><tr><td>Compute</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_project</code></td> </tr><tr><td>DNS</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_dns_managed_zone</code></td> </tr></tbody></table><ul><li>New properties added to various existing resources for CIS benchmarks:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> <th>Properties</th> </tr></thead><tbody><tr><td>Compute</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">isCustomerSuppliedKeysEncrypted</code></td> </tr><tr><td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">usesDefaultServiceAccount</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">usesFullAccessDefaultServiceAccount</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">blockProjectSSHKeys</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">isSerialPortEnabled</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">isShieldedVM</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">publicIpAddress</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">privateIpAddress</code></td> </tr><tr><td></td> <td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">isOSLoginEnabled</code></td> </tr><tr><td>Networking</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">flowLogsEnabled</code></td> </tr><tr><td></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">IPv4Range</code></td> </tr><tr><td>KMS</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">public</code></td> </tr></tbody></table><h3 data-id="google-workspaces">Google Workspaces</h3> <ul><li><p>Fix execution timeouts for some larger Google Workspaces accounts</p></li> <li><p>Update the following properties on <code class="code codeInline" spellcheck="false" tabindex="0">google_user</code> entities:</p> <ul><li><p>Updated <code class="code codeInline" spellcheck="false" tabindex="0">active</code> to true when the user is not suspended and not archived and<br> agreed to terms</p></li> <li><p>Updated <code class="code codeInline" spellcheck="false" tabindex="0">mfaEnabled</code> to true when user is enrolled in 2SV (removed check for<br><code class="code codeInline" spellcheck="false" tabindex="0">isEnforcedIn2Sv</code>)</p></li> <li><p>Removed <code class="code codeInline" spellcheck="false" tabindex="0">thumbnailPhotoEtag</code> since it is not a useful property to<br> index/query on</p></li> <li><p>Added normalized timestamp properties: <code class="code codeInline" spellcheck="false" tabindex="0">admin</code>, <code class="code codeInline" spellcheck="false" tabindex="0">createdOn</code>, <code class="code codeInline" spellcheck="false" tabindex="0">deletedOn</code>,<br> and <code class="code codeInline" spellcheck="false" tabindex="0">lastLoginOn</code></p></li> <li><p>Set <code class="code codeInline" spellcheck="false" tabindex="0">employeeType</code> from <code class="code codeInline" spellcheck="false" tabindex="0">employeeInfo.description</code>, which corresponds to<br> "Type of Employee" in the Google Admin UI under "Employee Information"<br> section</p></li> </ul></li> </ul><h3 data-id="jamf">Jamf</h3> <ul><li>Fixed failure to handle Jamf hosts such as <code class="code codeInline" spellcheck="false" tabindex="0">https://jss.myjamf.com:8443/?failover</code></li> </ul><h3 data-id="qualys">Qualys</h3> <ul><li>Adjusted pagination settings for host details fetching to address frequent connection errors</li> </ul><h3 data-id="rapid7">Rapid7</h3> <ul><li>Fixed execution timeout by migrating integration to latest SDK and runtime environment</li> </ul><h3 data-id="slack">Slack</h3> <ul><li><p>Changed <code class="code codeInline" spellcheck="false" tabindex="0">displayName</code> of <code class="code codeInline" spellcheck="false" tabindex="0">slack_user</code> to use <code class="code codeInline" spellcheck="false" tabindex="0">display_name</code> or <code class="code codeInline" spellcheck="false" tabindex="0">real_name</code> or <code class="code codeInline" spellcheck="false" tabindex="0">name</code>,<br> fallback to <code class="code codeInline" spellcheck="false" tabindex="0">id</code> only when those are undefined.</p></li> <li><p>Changed <code class="code codeInline" spellcheck="false" tabindex="0">username</code> property to use value from <code class="code codeInline" spellcheck="false" tabindex="0">user.name</code> instead of <code class="code codeInline" spellcheck="false" tabindex="0">user.id</code>.</p></li> <li>Added <code class="code codeInline" spellcheck="false" tabindex="0">userId</code> property using value from <code class="code codeInline" spellcheck="false" tabindex="0">user.id</code>.</li> <li><p>Added <code class="code codeInline" spellcheck="false" tabindex="0">admin</code> boolean property to <code class="code codeInline" spellcheck="false" tabindex="0">slack_user</code>, as it is a normalized property<br> on the <code class="code codeInline" spellcheck="false" tabindex="0">User</code> class entity.</p></li> <li><p>Added normalized boolean properties <code class="code codeInline" spellcheck="false" tabindex="0">active</code>, <code class="code codeInline" spellcheck="false" tabindex="0">archived</code>, <code class="code codeInline" spellcheck="false" tabindex="0">public</code>, <code class="code codeInline" spellcheck="false" tabindex="0">private</code><br> to the <code class="code codeInline" spellcheck="false" tabindex="0">slack_channel</code> entity.</p></li> </ul><h2 data-id="other-improvements-and-bug-fixes">Other Improvements and Bug Fixes</h2> <ul><li>Improved <strong>Landing page performance</strong> when the query results contain large data sets</li> <li>UX improvement to increased pagination limit for the <strong>Users and Access</strong> modal</li> <li>Disabled edit/delete of an entity from the Alerts view when the entity data is historic</li> <li>Fixed an issue with vulnerability findings sorting</li> <li>Fixed an issue with sorting by severity in the alert rules table</li> <li>Fixed an issue with the alert rules edit modal that caused it to not reset on close</li> <li>Fixed an issue where navigating to a url of a deleted insights board caused nothing to render</li> <li>Fixed a UI alignment issue in the Settings menu</li> <li>Added invalid characters check to policy/procedure id input</li> </ul> </article> </main>
.png)