Release Notes For November 20, 2017

New
Alert History - alerts come in, get triaged, and closed - then you never see them again… until now! We’ve added a new tab on the Alert Review page where you can review all of your closed alerts. You’ll see additional information about the suppression that closed the alert and can jump to the indicator detail page.
New
Public API improvements: create bulk intel, list alerts, documentation, Python client library. We want people using and sharing our data, we’re listening closely to our users’ requests and are working on providing a simple, clear way to interact with Perch via API.
New
Minor improvement to Search so that it includes indicators that contain observables that contain the search term, instead of just searching the body of the indicator.
Bugfix
Application tour should now skip admin-only steps for non-admin users.
Bugfix
Clicking the comment delete button should now actually delete the comment.
Bugfix
Indicator history event ordering makes more sense now - we have to load the indicator before we can detect on it.
Bugfix
Alerts by Host - columns scroll independently so that picking an host far down the list doesn’t require you to scroll all the way back to the top to see the alerts for that host.
Note
We’re working on a CSV format and Python tool to bulk load intel into Perch