To provide you with all the information you need to make data-driven decisions, we made it easy for you to see the top threats in a convenient way--in lists directly from your Insights Dashboard that can expand from 5 up to 100. These lists feature the 100 most attacked people, the 100 most malicious senders, and the 100 most impersonated brands.
It's now possible to do an advanced search of all scans to search for the following:
This new advanced search option is in addition to the options to search files by name, hash, type and mime type.
With X-Ray you can easily check whether files are clean or malicious using the self-analysis option.
You can also provide a password to make sure password-protected files are fully unpacked, so they can be scanned using both static and dynamic engines, making sure you receive the right verdict.
Unlike any other service, Perception Point offers your security team a direct link to our Incident Response team. Using the Request Investigation option in X-Ray, you can easily alert us about any email you think we got wrong, and we’ll take immediate action.
With our Office 365 and G Suite apps, we have taken this option to the next level by also allowing end-users to report on any suspicious email as well—both to your security team and to our Incident Response team, which will take the necessary measures.
For all emails marked as malicious, you will receive a detailed report. The system will then automatically retrieve all similar emails from all relevant email boxes—closing the remediation loop quickly.
The end-user reporting option is also available with the Microsoft Report Message Add-In. There's no need to install Perception Point's application. The only thing you have to do is configure a mailbox destination for the reports. Each will automatically be converted into “request investigation.”
https://appsource.microsoft.com/en-us/product/office/WA104381180
Internet Content Adaptation Protocol (ICAP) is a lightweight request/response-based protocol for executing a "remote procedure call" on HTTP messages.
ICAP servers are being used by various applications and are mainly used for virus scanning and content filtering.
We have now expanded our coverage to a countless number of channels by supporting ICAP, providing next-gen threat prevention against file-based attacks.
We detect malicious content in cloud storage applications all the time and quarantine is available for Dropbox for some time.
Now, you can quarantine files and prevent access to them by end-users also in Microsoft OneDrive, Sharepoint, and Teams. The quarantine folder can be configured, and the original file will be replaced by a text file.
X-Ray application is now available in the CrowdStrike Store. The application provides advanced holistic threat-containment solutions.
The new containment process is simple and effective. When an attack is detected by the Falcon platform it notifies the X-Ray. The X-Ray automatically scans all organizational content-exchange channels (e.g., e-mail, cloud storage, CRM), to which it is connected, to map the extent of the breach, and immediately contains further transmission by deleting the content from all relevant places.
VIP users are more vulnerable to impersonation attacks, making it extremely important that you stay on top of these accounts quickly and easily.
Now, we've made it even easier to stay on top of them. You can easily filter scans to see only VIP users and handle them faster.
You may need to contact our team to make sure the right users are defined as VIPs.
Read more about it here.
To make it easier and faster to review the verdict of scans, we have moved the option to see preview and screenshots to the scan list, without a need to expand the scan row or get into the scan details.
