Jump to content

ESET Enterprise Inspector version 1.6.1716 has been released


Recommended Posts

  • Administrators

Release date: June 1, 2021

ESET Enterprise Inspector 1.6.1716 has been released.

The installer is now available for download from the download page.

Changelog:

  • Added: Granular User Access rights (permission sets in ESET PROTECT)

  • Added: Incidents view

  • Added: Remote Connection method

  • Added: Reduction of “Detection overload”:

    • Learning mode

    • Protection against noisy Rules

    • Default Exclusions suggestions

    • Profile based configuration in installer to setup the product for various user types

    • Choice of 3 preset Profiles

    • Choice of Rules to enable based on four Severity levels

    • Choice of Data collection options

    • Choice of Data retention periods

    • Change of default views

  • Improved: Database improvements:

    • Event Filters created automatically for noisy Computers

    • DB Purge process improvement

    • Display estimated DB required space on Dashboard

    • Warning for sub-optimal DB configuration

    • Warning in case of insufficient space

  • Improved: User Interface improvements

    • Notifications view

    • Improved Details view

    • Filtering in Raw Events view

    • Categorization for Rules

    • Display PEDrop module hash in UI

  • Improved: Detection capabilities improvements

    • Ability to detect login brute-force

    • Ability to detect misuse of trusted DLLs

    • Ability to monitor discovery techniques using WMI GetObject method

    • Re-evaluation of Rules severity values (based on latest telemetry statistics)

    • Change of Ruleset to reflect compromised flag

  • Improved: REST API improvements

    • Ability to disable/enable Rules

    • Ability to create/manage Exclusions

    • Ability to trigger Network Isolation

    • Added Trigger Event for Detections

    • Ability to upload a list of hashes to be blocked

    • Ability to update Computer state

  • Other improvements:

    • Ease of deployment – All-in-one installer with EI Agent (ESET PROTECT 8.1 required)

    • Performance and scaling improvements

 

Known Issues:

As of version 1.6, we are introducing a new feature, "Optional Rules". There is a separate group of rules that are not enabled by default, yet they are installed by the installer but in a disabled state. Users can decide for these rules if they suit their environment and enable them manually.

Having this feature, we have decided to move some of the existing rules to the "Optional" category. It means some of the existing rules enabled in your environment may, after the installation, become disabled because they are updated with the new version of the rule, which is optional now. Please check disabled rules after the upgrade from previous versions if some of the rules you want to have enabled were not disabled by this mechanism.

Support Resources:

Link to comment
Share on other sites

  • Marcos unlocked this topic

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...