Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
JupiterOne 2021.69 Release - AskJ1 Community
<main> <article class="userContent"> <p>2021-04-21</p> <h2 data-id="new-features-and-improvements">New Features and Improvements</h2> <ul><li><p>Made the "Add new dashboard" to Insights view more clear by removing checkboxes (the view is single select, not multi select).</p></li> <li><p>Made the alerts app sort by severity when it is loaded.</p></li> <li><p>Added a minimum height to compliance evidence query results.</p></li> <li><p>Display "considerations" when available, in the editing view of a procedure in the Policies app.</p></li> <li><p>Also updated all existing procedures to have considerations if available from the templates.</p></li> </ul><h2 data-id="integrations">Integrations</h2> <h3 data-id="azure">Azure</h3> <ul><li><p>Added an option to auto-configure additional integrations for each<br> subscription in a directory/tenant that does not have a "JupiterOne" tag set<br> to "SKIP". Find this setting on the integration instance that you have<br> configured to ingest Active Directory data from Azure.</p></li> <li><p>Added the <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">enabled</code> property to <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_security_center_setting</code> entities.</p></li> <li>Added support for ingesting the following <strong>new</strong> resources:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>Security Center</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_security_center_setting</code></td> </tr><tr><td>Security Center</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_security_center_auto_provisioning_setting</code></td> </tr><tr><td>Policy</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> </tr><tr><td>Policy</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_policy_set_definition</code></td> </tr></tbody></table><ul><li><p>Only ingest an entity for the subscription identified by the <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">subscriptionId</code><br> config field. Previously, the integration would create an entity for every<br> subscription, though none of the resources would be ingested. This new<br> behavior limits the scope to the subscription defined by <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">subscriptionId</code>.</p></li> <li><p>Fixed fetch errors related to fetching storage accounts when they do not<br> support file and blob resources.</p></li> <li><p>Improved error messaging when <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">Directory.Read.All</code> permission is not present<br> and <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">config.ingestActiveDirectory=true</code>.</p></li> <li><p>Fixed <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">DuplicateKeyError</code>s errors on <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">azure_vm_uses_storage_account</code> when<br> multiple data disks point to the same storage account.</p></li> </ul><h3 data-id="cobalt">Cobalt</h3> <p>Initial release of Cobalt.io integration (beta)! 🎉</p> <ul><li>Check out the<br><a rel="nofollow" href="../docs/integrations/cobalt/cobalt.md">docs</a><br> for details on what's currently supported.</li> </ul><h3 data-id="gitlab">Gitlab</h3> <ul><li>Fixed failure to complete ingestion for some large Gitlab accounts by moving<br> to latest infrastructure.</li> </ul><h3 data-id="google-cloud">Google Cloud</h3> <ul><li>Added support for ingesting the following <strong>new</strong> resources:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>API Gateway</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api_config</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_api_gateway_gateway</code></td> </tr><tr><td>Certificate Authority</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate_authority</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate</code></td> </tr><tr><td>Cloud Functions</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_cloud_function</code> <strong>USES</strong> <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td>Spanner</td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_spanner_instance</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_spanner_instance_database</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_spanner_instance_config</code></td> </tr></tbody></table><ul><li>Remove ingestion of raw data from <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code> as it can contain<br> a significant amount of data</li> </ul><h3 data-id="jamf">Jamf</h3> <ul><li>Fixed a regression that prevented connections to Jamf servers running on port<br><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">8443</code>.</li> </ul><h3 data-id="qualys">Qualys</h3> <ul><li><p>Added additional properties to <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">discovered_host</code> <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">Host</code> mapped entities:</p> <ul><li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tags</code>: Simple Qualys asset tag values (i.e. <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tags: ["Cloud Agent"]</code>)</li> </ul></li> <li><p>Added additional properties to <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">aws_instance</code> <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">Host</code> mapped entities:</p> <ul><li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tag.*</code>: Named tag properties from EC2 instance (i.e. <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tag.Owner = "value"</code>)</li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tags</code>: Simple Qualys asset tag values (i.e. <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">tags: ["Cloud Agent"]</code>)</li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">qualysFirstDiscoveredOn</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">qualysLastUpdatedOn</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">accountId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">region</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">state</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">reservationId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">availabilityZone</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">subnetId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">vpcId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">instanceId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">instanceType</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">imageId</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">privateDnsName</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">publicDnsName</code></li> <li><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">publicIpAddress</code></li> </ul></li> <li><p>Added <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">Vulnerability.qid</code> to support mapping<br><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">TheatIntel.vulnId === Vulnerability.qid</code>. Note that <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">ThreatIntel.vulnId</code> must<br> be of type <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">number</code> for the mapping to function.<br> A Qualys detection may be associated with many CVEs. These detections become<br> entities having<br><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">{ _class: 'Vulnerability', _type: 'cve', id: 'CVE-ID-HERE', qid: 123456 }</code>.<br> When there are no CVEs associated with the detection, entities are produced as<br><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">{ _class: 'Vulnerability', _type: 'qualys_vuln', id: '123456', qid: 123456 }</code>.<br> All <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">id</code> properties are intended to be String values; <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">qid</code> is a number to<br> reflect the type of the value from the source, supporting queries such as<br><code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">find Vulnerabilty with qid=123456</code>.</p></li> <li><p>Fixed missing <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">_key</code> on <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">aws_instance</code> <code class="code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline code codeInline" spellcheck="false" tabindex="0">Host</code> mapped entities.</p></li> </ul><h2 data-id="bug-fixes">Bug Fixes</h2> <ul><li>Fixed issue where full screen graph viewer didn't work properly in insights</li> <li>Resolved an issue where the graph viewer would leave a blank space at the bottom of the question results container</li> <li>Fixed an issue where a new insights board could not be selected</li> <li>Fixed an issue where the compliance onboarding modal would incorrectly route when you close the modal</li> <li>Fixed an issue where the CREATE_JIRA_TICKET would save the incorrect format when configuring a rule action</li> <li>Fixed an issue where invalid characters were preventing the import of certain compliance standards</li> <li>Fixed an issue where the asset inventory would show "No Data" instead of a loading indicator</li> <li>Fixed an issue where a question with invalid syntax would cause an unhelpful and un-descriptive error message to appear</li> <li>Fixed an issue where certain users with scoped permissions would be unable to login via SSO</li> <li>Fixed an issue where query history was not working as expected</li> </ul> </article> </main>
.png)