InsightIDR Release Notes

This release includes our new rule priority for custom alerts, Dashboard chart captions, Rapid7 Resource Names (RRNs) and improvements to User Interface (UI) color palette.

This release includes our new rule priority for UBA detection rules, newly improved Assets Details page, and improvements to search performance speeds in Log Search.

This release includes our new copy investigation evidence to exception rule feature, improvements to log line attribution, and mixed quote support.

This release includes MITRE ATT&CK mapping views and Attacker Behavior Analytics process and Command Line Detection Rules.

This release includes a unified Alert Settings experience, Event Source Health Monitoring, global Dashboard filtering and updates to Log Search.

This release includes a new Auth0 Event Source, updates to our LEQL search queries, Alerts and language.

This release includes a new InsightIDR dark mode feature, new user pages for active and disabled users, and updates to the dashboards and reports.

This release includes new parsing support for Microsoft Azure and updates to the Exploits page, IP Addresses tables and a new classification for SharePoint admins.

This release includes updates to the Duo Security event source, Entry Inspector, and Investigations Timeline, as well as improvements to Network Sensor Health.

This release includes a new category for ingress events and functionality updates to the User Watchlist page.