Release Notes For August 28, 2017

New
Perchybana really loves all the recent attention. To help you really appreciate her beauty, we’ve added a convenient button on each alert that will take you directly to Perchybana with the data filtered just to that alert’s details. Triage alerts just like the pros.
New
Paginate all the things! We’ve revamped how we handle larger data sets in Perch and how that data is fetched from our servers:
  • Pagination added to: the Community Dashboard recent indicators so you can check out all that juicy community intel (last 10,000 indicators only, for now), not just the most recent 5.
  • Another pass at Alert Review: suppressing an alert no longer completely refreshes the alert list; if the suppression partially suppresses an event, such as with an IP-based suppression, the event will be updated with the unsuppressed information.
  • Suppression Review pagination: suppressions still don’t load as fast as we’d like, but now the review page only shows 25 at a time, so the delay is more manageable. We’re still going to take another pass at making suppressions load faster in the near future.
New
Public-to-public alert monitoring:
  • You can now tell Perch that you’d like to see alerts from specific public subnets. If an alert contains a public IP that is in a monitored subnet, it will now show up in Perch. (Previously, Perch would intentionally ignore all public-public alerts.
New
Sensor intel optimizations
  • We’re able to use the data we’ve collected to optimize which intel we send down to your sensors. This results in fewer false positives from the sensor (and less bandwidth used) and opens up opportunities to ensure that the most relevant intel is prioritized more often.
Bugfix
Fixed several edge-case issues with Perchybana link:
  • Mixed start/end dates
  • Port-less (e.g. ICMP) alerts
  • Missing fields for certain common ports.
Bugfix
Our No Suppression Left Behind campaign continues! The previous fix for the ‘global/community’ suppressions showing as ‘Unknown [null]’ was FAKE NEWS! SHAMEFUL! So we fixed it again, for reals this time.
Note
Code base maintenance. Perchy can be a messy bird at times and he works best in a clean cage.
Note
(Coming Soon) Perch Help website
  • Since the initial launch of Perch, we’ve learned a ton about what it takes for our users to get the most value from Perch and we want to share that with any many of our customers as we can. We’re collecting that information, FAQs, and other tidbits of info into a new, mobile-friendly help website.