Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
JupiterOne 30 June 2022 Release - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="new-features-and-improvements">New Features and Improvements</h2> <ul><li><p>Introducing: Assessments! Assessments provide an easy way to understand what is in your environment, based on predefined J1QL questions. Assessments groups together as many questions as you choose and automatically runs them, so that you can evaluate your data in a single view.</p> <p>This feature gives you a quick method to get a greater understand of what needs your attention in your environment. You can run assessments based on categories such as incident response or privacy, based on a tag such as "CrowdStrike" or "encryption", or use keyword searching to add any question saved in the questions library. Assessments are available to everyone with J1 Compliance access.<br> <br><img src="https://us.v-cdn.net/6035534/uploads/KHGHE9IBVS7N/rn-assessments.png" alt="" class="embedImage-img importedEmbed-img"></img><br> </p></li> <li><p>Scope filters in J1 Compliance now support tag values, giving you the ability to easily scope a framework or benchmark to a specific tag.</p></li> <li><p>Additional filtering options are now available in the J1 Compliance <strong>Add question</strong> modal when adding evidence to a framework requirement. You are able to filter based on question categories and tags, as well as show managed questions and the details of the query for a question. <br> </p> <p><img src="https://us.v-cdn.net/6035534/uploads/GQXFVK2GRKAV/rn-filters.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Organizational values for J1 Policies are now synced to account parameters, enabling you to use your defined parameters from the parameter service such as secret values in J1 Policies. Alternatively, this feature allows you to reference platform-wide variables, versus those scoped specifically to J1 Policies.</p></li> </ul><h2 data-id="integrations">Integrations</h2> <h3 data-id="aws">AWS</h3> <ul><li>Added the following entities:</li> </ul><table><thead><tr><th>Resource</th> <th>Type</th> <th>Class</th> </tr></thead><tbody><tr><td>AWS Kinesis Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">aws_kinesis</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>AWS Kinesis Stream</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">aws_kinesis_stream</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataCollection</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr></tbody></table><ul><li>Add the following relationships:</li> </ul><table><thead><tr><th>Source</th> <th>Class</th> <th>Target</th> </tr></thead><tbody><tr><td>aws_kinesis</td> <td>HAS</td> <td>aws_kinesis_stream</td> </tr><tr><td>aws_kinesis_stream</td> <td>USES</td> <td>aws_kms_key</td> </tr></tbody></table><ul><li>Added the following mapped relationships:</li> </ul><table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Direction</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">aws_kinesis_stream</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">*aws_kinesis_consumer*</code></td> <td>REVERSE</td> </tr></tbody></table><h3 data-id="cisco-secure-workload">Cisco Secure Workload</h3> <p>The following entities are created:</p> <table><thead><tr><th>Resources</th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> </tr></thead><tbody><tr><td>Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>Interface</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_interface</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr><tr><td>Package</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_package</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">CodeModule</code></td> </tr><tr><td>Role</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_role</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessRole</code></td> </tr><tr><td>Scope</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>User</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_user</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr><tr><td>Workload</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_project</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Project</code></td> </tr><tr><td>Workload Vulnerability</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_workload_finding</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Finding</code></td> </tr></tbody></table><p>The following relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_interface</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_package</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_workload_finding</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_interface</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_package</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_workload_finding</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_role</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_user</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_scope</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">csw_user</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">csw_role</code></td> </tr></tbody></table><h3 data-id="crowdstrike">CrowdStrike</h3> <ul><li>Fixed an issue so that the <code class="code codeInline" spellcheck="false" tabindex="0">crowdstrike_sensor</code> maps to <code class="code codeInline" spellcheck="false" tabindex="0">aws_instance</code> entities when the CrowdStrike device's <code class="code codeInline" spellcheck="false" tabindex="0">service_provider</code> property has the value <code class="code codeInline" spellcheck="false" tabindex="0">AWS_EC2_V2</code>.</li> </ul><h3 data-id="github">GitHub</h3> <ul><li><code class="code codeInline" spellcheck="false" tabindex="0">Finding</code> relationships to <code class="code codeInline" spellcheck="false" tabindex="0">CWE</code> and <code class="code codeInline" spellcheck="false" tabindex="0">CVE</code> are now mapped relationships and do not create direct relationships.</li> <li>Fixed an issue that was causing duplicate pull request entities to be created.</li> </ul><h3 data-id="jamf">Jamf</h3> <ul><li>Changed the <code class="code codeInline" spellcheck="false" tabindex="0">extensionAttributes</code> properties of <code class="code codeInline" spellcheck="false" tabindex="0">user_endpoint</code> entity to only include the Deployment status property due to entity size concerns.</li> </ul><h3 data-id="microsoft-365">Microsoft 365</h3> <ul><li><code class="code codeInline" spellcheck="false" tabindex="0">macAddress</code>, <code class="code codeInline" spellcheck="false" tabindex="0">ipAddress</code>, <code class="code codeInline" spellcheck="false" tabindex="0">hostname</code>, and <code class="code codeInline" spellcheck="false" tabindex="0">ethernetMacAddress</code> properties are added to managed device entities (<code class="code codeInline" spellcheck="false" tabindex="0">Host</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Device</code>).</li> <li><code class="code codeInline" spellcheck="false" tabindex="0">macAddress</code> properties on managed devices are normalized to a <code class="code codeInline" spellcheck="false" tabindex="0">aa:bb:cc:11:22:33</code> format.</li> </ul><h3 data-id="orca">Orca</h3> <ul><li>Changed this relationship:</li> </ul><table><thead><tr><th>Source</th> <th>class</th> <th>Target</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">orca_finding</code></td> <td><span style="text-decoration: line-through;">HAS</span> <strong>IS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">cve</code></td> </tr></tbody></table><h3 data-id="qualys">Qualys</h3> <ul><li>Added a configuration setting for <code class="code codeInline" spellcheck="false" tabindex="0">webAppScanApplicationIdFilter</code> to limit ingestion of web apps that match IDs provided in the filter.</li> </ul><h3 data-id="slack">Slack</h3> <ul><li>Improved error messaging when account validation issues are encountered.</li> </ul><h2 data-id="bug-fixes">Bug Fixes</h2> <ul><li>Fixed multiple bugs related to Search and Search history performance.</li> <li>Resolved an issue with limits on custom questions in Search.</li> <li>Addressed a problem with the Compliance control library where updates were not reflected without a refresh.</li> </ul><h2 data-id="coming-soon">Coming Soon</h2> <ul><li>In the coming weeks, we will be introducing a new navigation pattern. We are retiring the tile pattern for navigating between areas of the platform, and pulling out each application into the top-level navigation bar.</li> <li>The Asset details drawer is getting some updates! Stay tuned for more information.</li> </ul> </article> </main>
.png)