New
- Public InsightConnect Workflow APIs - Import & Export Workflows
- Public endpoints and documentation are now available to Import and Export Workflows.
- Export workflow exports all data related to a workflow using a workflowID. Latest published version will always be exported; if the workflow has never been published, the unpublished version will be exported.
- Import workflow imports a workflow using the json document response from the Export API. This creates an entirely new workflow, and does not overwrite an existing workflow.
Improved
- Filters on IDR ABA Trigger New Filters have been added to the InsightIDR Attacker Behavior Analytics Alert Trigger detection rule selection modal.