Team Devo is happy to present Devo Platform 8.16.17, which introduces some amazing and impactful capabilities. For MSSPs, a giant step forward with the Shared Alerts feature. MSSPs can now share Parent Domain alerts across their tenant domains, individually or in bulk. This not only simplifies enabling new clients, but now clients can see all the protection provided by the MSSP! Workflow-wise, we have improved alert management with editable Post Alert Filtering, organized Common lookups in a new tab, and released the new Funnel Widget for Activeboards.  Rounding off this release with a collection of improvements and bug fixes, make sure you jump right in!

Release Geos

Table of Contents

New Features

Shared Alerts feature for MSSP’s

Quite possibly one of the biggest updates to the Devo Platform, MSSP’s can now share Alerts from the Parent Domain to the Child domains. This means that it will be much easier for customers to see value as they will be able to see the threat’s the MSSP has resolved for them!!

This feature introduces the following capabilities:

• Root Domain Alert Sharing: Alert rules installed in the root domain can now be optionally shared with tenant domains.
• Configurable Sharing: Choose which alerts to share or keep alerts private from tenant domains
• Rule Management: Share your alerts individually or in bulk through the Alerts->Rules tab. (API functionality coming soon)
• Shared Auditing: Shared/Unshared actions logged in devo.audit.alert.definition table.

Learn more in our documentation.

Edit Post Alert Filters

This new capability allows you to edit post filters after they have been created giving you more flexibility and control when managing your alerts. When you are managing multiple hundreds of alerts at a time, this flexibility is a key win!

The following elements can be edited:

• Name
• Condition
• Action

Common Lookups

Under the Administration section then Data Management you will see we have divided the Lookups tab between Domain Lookups and Common Lookups.

The new Common Lookups Section contains lookups that have been provided by Devo like Mispindicator and those shared with a domain from the parent domain.

Common Lookups are restricted in the tenant domain by:

• Does not display lookup type
• Does not display status
• Does not display if it is a shared lookup
• Disabled download in CSV
• Disabled edit function
• Disabled updating function
• Disabled share function
• Disabled Delete function
• Disabled Go to query function

Activeboards: New Chart: Funnel

A new widget, the Funnel Chart will be available in Activeboards.

A Funnel Chart is a type of chart that is used to represent data in stages, showing the progressive reduction of data as it moves through a process. This is particularly useful for visualizing conversion rates, identifying bottlenecks, and optimizing processes in areas such as sales, marketing, and user engagement.

Improvements

Relays and ELB section renamed to Ingestion

The Section “Relays and ELB” will be renamed to “Ingestion”.  This change is also reflected in the Roles section.

Alerts: Alert and Rule name column width increased

This change will ensure most names are fully visible with out needing to hover over the element.

Two new Statuses for Triggered Alerts

True Positive and Under Investigation statuses have been added to the Triggered Alerts page for triage actions.

Bug Fixes 

Fixed Usage Analytics average daily ingestion

Fixed Activeboard find-widget not adapting to dark mode

Fixed find words component after resize

PDF Reports vulnerabilities up to date

Fixed bulk comment window in Alert Triggered View.

Fixed copy alert names from Alert Triggered View.