2022.12 Release Notes

MistNet NDR has been renamed LogRhythm NDR.

During a transition period, you will see both names referenced in our documentation. In a later release, the user interface (UI) will be updated to include only references to LogRhythm NDR. At that time, our documentation will also be updated to only reference LogRhythm NDR.

New Features

• EDR integration now provides higher-level threat detection and response capabilities for endpoints (workstations and servers), enabling the user to more thoroughly and comprehensively respond to threats.
• ServiceNow integration now allows automatic transfer of information from NDR to ServiceNow and reflects changes in Incident updates from NDR.
• VirusTotal Integration now provides the user the ability to add VirusTotal credentials in the config page, check whether the credentials provided are valid, and check incidents and cases against the VirusTotal database.

New Features in the New NDR UI

• Top Policy Violations Notification Widget now gives SOC Admins visibility on users' adherence to policies. They can also quickly follow up with end users who violate policies.
• The new UI has been updated with functionality and improvements in the following areas:
  • Dashboard
  • Firewall and endpoint integrations
  • Incident management
  • Operational settings: data masking and SAML/SSO
  • System: audit trail, case events, health alert, probe node status, scored events, and system info
  • Networks
  • Rapid 7 configuration
  • Role-based menus and page authentication
  • Timeline view
  • Active directory and LDAP
  • Anomali and whitelist policy management

Deprecated Features

• No deprecated features in this release.

Resolved Issues

Resolved Issues - Security

Security-related issues resolved with this release are available for customers to view on the Community.

Log in to the New NDR UI

1. Log in to the LogRhythm NDR UI.
2. In the top right of the page, place your cursor over your profile name and role and click Edit Profile.
   The Edit Profile page appears.
3. To enable the Keycloak login, click the Enable Keycloak Login checkbox.
   The Credentials for Keycloak login box appears. 
4. Type a new password in the Password field and in the Confirm Password field and click Create.  
   The message "Created Successfully" appears.
5. Click Ok.
6. Click the blue Try New UI tab.
   The new UI opens in a new tab.
7. Enter your username and new password you created and click Sign In. 
   The Dashboard of the new UI appears.