JupiterOne October 2024 Release
New Features and Improvements
Inline Dashboard Filters
Inline filters are now available in Insights dashboards. This allows you to filter the data in a dashboard widget inline without having to open the dashboard filter pane. The release of inline filters is the first step in a series of improvements to make it easier for users to drill down into the data in their dashboards.
JupiterOne Rule Tags
The JupiterOne rule engine now supports tags on rules. Tags can be used to add additional metadata to rules allowing for more complex filtering and grouping of rules. Previously JupiterOne supported labels with rules, but this has now been expanded to support tags which aligns with how tags are used in other parts of the platform.
Inactivity Timeout
As an added security measure, the JupiterOne platform now supports an inactivity timeout. If a user is inactive for a period of time, their session will be automatically logged out. This can be configured by an administrator in the Security & Access
section of the Settings
page.
JupiterOne Rule Bookkeeping Improvements
Rule Evaluation Details Added to JupiterOne Rule Entity
To make it easier for users to track and monitor successful rule runs, additional properties have been added to the JupiterOne rule entity. These properties are:
lastEvaluationStartOn
: The timestamp of the last evaluation startlastSuccessfulEvaluationEndOn
: The timestamp of the last successful evaluation endlastFailedEvaluationEndOn
: The timestamp of the last failed evaluation endlastEvaluationEndOn
: The timestamp of the last evaluation end
Automatically Disable Consistently Failing Rules
To help reduce noise in the platform, JupiterOne will automatically disable rules that have failed consistently over the last 30 days and also that have not been updated in the last 30 days. The rules will be moved into a System Disabled
state and will not be evaluated.
Terraform Provider
The JupiterOne Terraform provided is available here: https://registry.terraform.io/providers/JupiterOne/jupiterone/latest
The recent improvements include:
- Creating integrations using the Terraform provider
- Creating inline dashboard filters using the Terraform provider
Python SDK
Made improvements to the Python SDK including:
- Added support for syncMode when creating sync jobs
- Added methods for working with rules
- Released the latest version 1.2.1 of the SDK
Postman Collection
A new JupiterOne Postman collection has been added to the JupiterOne Public Workspace. The collection includes examples of how to use the JupiterOne API to manage integrations, rules, and other resources.
Documentation Updates
The following documentation has been updated to provide examples of more complex JupiterOne rule configurations:
Integration Updates
AWS
More AWS services and properties have been added to the AWS integration:
- AWS IAM - added expired passwords property
- ACM PCA - added support for PCA certificates
- VPC Endpoint - add support for VPC endpoint uses network interface relationship
- AWS Account - added root user password last changed on property
- WAF V2 - added support for additional rules
Snowflake
Added support for key pair authentication
Signal Sciences
Added additional entity types and properties:
- Added sites
- Added agents
- Added cloudwaf
M365 Intune
Added support for advanced device details
Beta Integration Releases
As part of our beta, we’re looking for teams interested in exploring the integration and providing valuable feedback. If you'd like to be part of the beta testing group, please request access in the app.
Forescount Beta Release
We’re excited to announce the beta release of our Forescout integration in JupiterOne! This new integration empowers teams to connect Forescout device intelligence directly into the JupiterOne platform, allowing for enhanced visibility and streamlined security operations.
Confluent Cloud Beta Release
We’re excited to announce the beta release of our Confluent Cloud integration in JupiterOne! This integration brings the power of Confluent’s managed event streaming directly into the JupiterOne platform, offering a unified way to monitor and secure your Confluent Cloud resources alongside other assets.
Secureworks Taegis Beta Release
We’re thrilled to announce the beta release of our Secureworks Taegis integration in JupiterOne! This integration brings robust security insights from Secureworks Taegis into the JupiterOne platform, enhancing visibility and control over your security posture.