Skip to main content

Recently active topics

11 Topics
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Exchange Release 2.2

The Devo Exchange team is happy to introduce a release filled with features and content! Release 2.2 adds a new content type: Queries! This new content category is launching with 130 queries in 5 categories. We have also updated the content submission tool to accept queries. Synthetic data, an amazing tool for testing your defenses has received a great new feature: Runtime settings!  You can now set the Synthetic Data injection to run for a variable length of up to 30 days. Along with more great improvements the team also also delivered a huge collection of new content.  Learn more below!  Geo AvailabilityRegion Status GovCloud Released CA Released US Released US3 Released EU Released APAC Released   Table of ContentsNew Features New Content Type: Queries Updated Content Proposal Tool Synthetic Data Runtime Settings Improvements Copy Alert button in Alert Packs Improved Newest Sort New content Available 10 Activeboards have been upgraded with Multitenancy supp

40
juan.delrio
Admin
12 minutes ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Relay 2.9.2-2.13.3

The Devo Relay is a critical feature of Devo that receives inbound events from your data sources and then sends them to your Devo instance with all the tagging and processing rules that make Devo work as fast as it does.   This release collects updates to the Devo Relay from version 2.9.2 to 2.13.3.  The main feature added allows you to manage data ingestion across child domains in your multitenancy environment. Additionally, this release contains a host of improvements including new environmental data, support for language characters, improvements to the stats measurer, and more!  Learn more below! Table of ContentsNew Features Domain Impersonation for Multitenancy (v2.11.0) Improvements Fixes New FeaturesDomain Impersonation for Multitenancy (v2.11.0)This new feature allows you to manage data ingestion across multiple domains within your multitenant structure using a single certificate.Learn more in our Documentation Improvements Menu in Devo Relay CLI includes the variables to sele

260
juan.delrio
Admin
2 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
published in Devo Documentation
Devo Docs, the Devo Manual

Devo Connect has a full catalog of Knowledge Base articles for our members. If you want to learn more about Devo while I process your registration, head on over to our public documentation portal and start learning! You will find rich information about how Devo works differently from other SIEMs to get you fast results, technical details of every component, and the latest release notes. https://docs.devo.com 

60
juan.delrio
Admin
6 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Platform 8.14.8

Hello everyone, the latest release of the Devo Platform is now live! Release 8.14.8 brings a variety of improvements to the Login and Homepage. We have improved our Login experience by removing the domain list limits entirely!  You can now view the full list of all the domains you have access to with search and pagination capabilities.  With this new feature, we have also added a new visual distinguishing mark for Root domains so you can find them more easily.  Following your feedback, we have made some improvements to the new HomePage including permanently hiding the top banner. Learn more below!  Geo AvailabilityRegion Status CA Released US Released EU Released APAC Released   Table of ContentsNew Features Limitless domain switching Easily Identify Root domains Improvements Usability Improvements to new Home Page Bug Fixes New FeaturesLimitless domain switchingYou can now view the full list of domains you have access to and switch to without domain list limitations.

200
juan.delrio
Admin
7 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Security Operations: OOTB Alert Release 32

We're thrilled to announce the latest updates and additions to our alerting system with Release 32. This release enhances the functionality and accuracy of several firewall and threat detection alerts. A key improvement is the addition of source IP and hostname fields, improving the contextual information available for faster incident triage and response.Updated alerts include FWIpScanInternal, FWPortScanExternalSource, FWSMBTrafficOutbound, and advanced threat detection rules like REvilKaseyaWebShellsUploadConn and HAFNIUMWebShellsTargetingExchangeServers. These changes enhance the detection capabilities for network scans, unauthorized SMB traffic, RDP external access, and specific threats like REvil and HAFNIUM.To access Updated Detections, open the Security Operations app inside Devo and navigate to the Content Manager. Here, you can search for the detection name, and manage your alerts.  To update or install new alerts visit Devo Exchange. Table of ContentsAlerts Updated Firewall A

470
juan.delrio
Admin
8 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Parser Catalog update for November

The Devo Parser is one of the secret spices of our unique Hyperstream technology. The Parsers organize raw events stored in tags in different columns and display them in the corresponding tables. This method completely bypasses data indexing and contributes to Devo’s amazing search speeds. Every data source is unique, so we have a great catalog of existing parsers. Our teams review parser performance, build new parsers and update parsers on a regular basis. This article covers all the updated and new parsers available this month. If you require a new parser, please open a support ticket through the support portal located here. You can also visit the new Resources Portal, a single page for all your customer resources! Table of ContentsUpdated Parsers cloud.azure firewall.watchguard ftp.crushftp mail.mimecast firewall.all.traffic vcs.github cloud.office365 cef0.netsckope cef0.fortinet db.oracle firewall.all.ips box.unix firewall.cisco ids.suricata cloud.office365.management

210
juan.delrio
Admin
9 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Collector Catalog update for November

Every month, the integrations team work on new and updated collectors for you, and I collect them all in this Catalog Update.   This post contains new and updated collector information as well as links to their respective pages in our Documentation portal.  Be advised that some pages in Documentation may not be available at the time of posting but will be added as soon as they are available. To request new collectors or an update to an existing collector, please open a support ticket through the Support Portal. You can also visit the new Resources Portal, a single page for all your customer resources! Table of ContentsNew Collectors Dynatrace v1.0.0 Sendmarc v1.0.0 Absolute 1.0.0 Updated Collectors AWS SQS v1.7.0 Lark v1.2.0 Proofpoint POD v1.2.2 Trend Micro Vision One v1.2.2 Cyberark EPM v1.1.0 Citrix Cloud v1.2.0 Workday v1.3.0 Office 365 Exchange Message Tracing v3.2.2 Tenable v1.6.0 Trellix DLP v1.1.0 Crowdstrike API Resources v1.11.0 Azure EH v2.4.0 Mimecast v2.2.1

240
juan.delrio
Admin
9 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Platform Release 8.14.4

Hello everyone, the latest release of the Devo Platform is now live! Release 8.14.4 brings a variety of improvements to Data Search. A new Search button has been added to streamline Data Search workflows. You can launch new searches directly from a search results page without needing to travel to the finder. This will speed up threat hunting efforts dramatically! We have also enhanced error management with a persistent icon that you can refer to, and when possible allows you to reload the data from the error details. Read on to learn more about these features, improvements, and bug fixes!  Geo AvailabilityRegion Status GovCloud Pending CA Released US Released EU Released APAC Released   Table of ContentsNew Features Search Button in Data Search New Error Handling menu in Data Search Bug Fixes New FeaturesSearch Button in Data SearchYou are now able to run a new search from within an existing search results window without having to access the finders area!   The new

270
juan.delrio
Admin
21 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Platform Release 8.14.3

Hello everyone, the latest release of the Devo Platform is now live! Release 8.14.3 brings a variety of improvements to Alerts. I’m excited to announce streaming mode for Alerts! Once you turn it on, you no longer have to manually refresh the triggered Alerts list; you can engage in real-time with your triggered Alerts! Auditing becomes easier with a new Post-Filter auditing table. We have also added a new Column Visibility to Triggered Alerts table that allows you to show, hide, and reorder columns to create a customized view. Read on to learn more about these features, improvements, and bug fixes! Geo AvailabilityRegion Status GovCloud Pending CA Released US Released EU Released APAC Released   Table of ContentsNew Features in Alerts Streaming Mode for Alerts New Post-Filter Auditing New Custom Column Visibility In Activeboards Improved Error Messages Improvements Bug Fixes New Featuresin AlertsStreaming Mode for AlertsTurn on Streaming mode in Alerts t

260
juan.delrio
Admin
22 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Security Operations: OOTB Alerts Release 31

We're thrilled to announce the latest updates and additions to our alerting system with Release 31. This release introduces a significant enhancement to our alerting system. First, alert templates were updated to ensure more accurate and comprehensive notifications. Second, we developed a Ransomware MOVEit Vulnerability alert pack to detect and respond to potential exploitation attempts, covering the key attack vectors related to this threat.To access Updated Detections, open the Security Operations app inside Devo and navigate to the Content Manager. Here, you can search for the detection name, and manage your alerts.  To update or install new alerts and alert packs visit Devo Exchange. Table of ContentsNew Alert Pack: Ransomware MOVEit Updated Alerts available in the Ransomware MOVEit Vulnerability Alert Pack: Additionally updated Alerts AzureUserLoginSuspiciousRisk LinuxMaxSessionsPerUser TLDFromDomainNotInMozillaTLD WinAdminRemoteLogon  New Alert Pack: Ransomware MOVEitTo help

350
juan.delrio
Admin
22 days ago
juan.delrio
Admin
juan.delrioCommunity Manager
Devo Platform 8.14.0

 Hello everyone, the latest release of the Devo Platform is now live! Release 8.14.0 brings in a new Home Page redesign that makes it more lightweight and relevant to all our users! Jump directly into useful resources with the new top-row cards. Return to your tasks faster with quick launch windows containing all your recent and favorite searches and activeboards. Or start querying your data with the integration of the query window in the center of the page!  A new tab in Usage Analytics for Injestion and Licensing and login and table improvements round up the release.  Read on to learn more! Geo AvailabilityRegion Status CA Released US Released EU Released APAC Released  Table of ContentsNew Features Homepage Redesign Quick Action Cards Query and Recent Alerts Recent Searches and My Favorites Set your HomePage in preferences New Permissions available for HomePage New Ingestion and Licensing metrics in Usage Analytics Authentication Improvements Synthesis a

820
juan.delrio
Admin
28 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings