This release improves how you view and analyze threat data in Trellix Insights. It enhances visibility, centralizes key security data, and introduces new capabilities to help you investigate threats more efficiently.
Enhances the Threat Landscape dashboard to focus on recent threat activity
Introduces the Your Detections page to centralize endpoint security data and scores
Updates the MITRE ATT&CK Matrix to improve visibility into detection coverage and rule counts across products
Introduces the Command Lines widget to provide deeper insight into attacker behavior
Adds new countermeasures to expand coverage for emerging threats
Improves sorting in the Campaigns table to help you organize and analyze data more efficiently.
Enhancements
Threat Landscape dashboard updates:
To ensure analysts are focused on active, high-relevancy threats, the Global Detection map now displays the detection activity observed within the last seven days. Data older than seven days is automatically removed.
We have refined the color-coding on the map. The colors now adjust dynamically based on the number of detections, making it much easier to quickly identify global threat hotspots.
Unified Endpoint Monitoring: We have simplified how you view your organization's security data by centralizing endpoint information:
New "Your Detections" page: All endpoint-specific widgets have moved from the Threat Landscape dashboard to a new, unified Your Detections page. This includes the Security Posture Score and its detailed breakdowns for Content, Zero-day, Configuration, Detection Prevalence, and Vulnerability Assessment.
MITRE ATT&CK Matrix enhancements: The MITRE ATT&CK Matrix for Enterprise has been redesigned to emphasize your detection coverage across the Trellix product portfolio.
Rule count visibility: Added Rule count per product allowing users to see the exact number of detection rules associated with a specific MITRE Technique for each Trellix product.
Product-specific filtering: Introduced a Select products filter within the MITRE Matrix widget, enabling users to isolate techniques covered by specific products in their security stack.
Consolidated view: The MITRE Matrix widget has been optimized to focus on detection capabilities; countermeasures are no longer displayed in this specific widget to prioritize rule coverage analysis.
The Command Lines widget provides forensic visibility into the specific execution methods used by threat actors during a campaign. By exposing the literal command strings and arguments used in an attack, SOC analysts can better understand adversary behavior and create more effective hunting rules. This widget is displayed only when you apply a filter or select a product from the menu within the MITRE Matrix.
You can now sort each column in the Campaigns table—such as Severity, Last Seen, Campaign Name, Sector, Country, and Threat Category.
New countermeasures are added to address emerging threats across all attack stages.
Resolved issues
This release resolves known issues:
Reference | Resolution |
|---|---|
AE-7126 | Clicking the Playbook icon from a Campaign row now correctly navigates to the specific playbook associated with that campaign, rather than defaulting to the first available playbook. |
AE-8815 | Fixes the issue in the Environment page where long strings were truncated in the CSV Sector and Country selection menus. |
AE-8896 | Fixes the issue that prevented reports from downloading when browser pop-ups were disabled. |
AE-8946 | Fixes the issue for Endpoint and Detection Response (EDR) users where pivoting to EDR from the Campaigns IOC page did not work consistently. |
AE-9129 | Resolved a localization issue on the MITRE Explorer page where certain country names appeared in English instead of the localized language. |
AE-9174 | On the IVX Reports page, the layout remains stable when you click Get Report URL. |
Known issues
For a list of current known issues, see KB93109.
Additional information
For detailed technical information, including product guides and release notes of Trellix Insights, visit our documentation portal at docs.trellix.com.