MistNet NDR has been renamed LogRhythm NDR.
During a transition period, you will see both names referenced in our documentation. In a later release, the user interface (UI) will be updated to include only references to LogRhythm NDR. At that time, our documentation will also be updated only to reference LogRhythm NDR.
Enhancement of DNS & DGA Anomaly Models by Limiting Traffic
DNS and DGA models will not use traffic if the source, ext_info, domain_info, and domain fields end with or contain any of the following:
If a particular query contains whois.arin.net, whois.internic.net, and http://arsys.es/dominios/whois the traffic will not be used.
Salesforce Case ID
Data is now available as intended in the new and legacy UI.
Data now loads correctly in GUI once Elasticsearch is restarted.
Cluster Index status now works as expected.
Mistnet Events in the Incidents tab and the Hunt tab now load without any error.