New Features

New Users added for MSSPs

Two new types of users have been added to the Siemplify platform: Managed User and Managed Plus User. These user types enable a stronger working relationship between MSSPs and their end customers as it allows them to work together to run the SOC together. 

An MSSP can create a managed user who can handle cases in their own environment; or a managed-plus user who can both manage cases and also build playbooks within their own environment. For more information, please refer to Reasons to Create Managed/Managed-Plus Users and Create Managed/Managed-Plus Users

Playbook Permissions

The playbook creator can now define for each playbook who can edit the playbook and who can view only. The playbook creator can configure permissions in the environment level or drill down with specific permissions for SOC roles or individual users.  For example, you can have a specific Playbook shared among several environments and allow all of Tier 1 to view it but only one specific engineer within Tier 1 to edit it.

This feature provides added capabilities for the managed-plus user above as well as enterprise analysts. 

For more information, please refer to Playbook permissions. 

Playbook Blocks now Environment based
When creating Playbook Blocks, you can now select which environment the blocks are associated with. For users working with single items, this enables them to create reusable pieces of flow - tailored to the specific environments needs and tools. Siemplify recommends that Admins select "All Environments" as best practice.

For migration purposes - note that existing Playbook blocks in previous versions that were not associated with any environments will be converted to “All environments” blocks.

Filter Audit table by User

From now on, when filtering audit activities, you can filter by user name.

User Type in Add/Edit User form can now be changed

This feature ensures that changing a user's authentication type  no longer means you have to create a brand new user in the platform. From now on, you can select the Edit User form and change the User Type from internal to external and vice versa.

When changing from internal to external - the Login ID type can be "string".

When changing from external to internal - the Login ID must be type "email". 

Bulk "Assign to me and Close" option now available from Search screen

Previously, the option to assign all cases to yourself and close them in a single action was only available from the Cases screen. Now it's available from the Search screen.

Advanced Reports  - new filter added

You can now generate Reports in the Advanced Reports section which shows analysts that have not been active recently using the Last Login Time field.

New Support Portal

No  changes to functionality have been made - however, you will experience a different look and feel. Legacy bugs opened before July 24th 2022 will be viewed from here as well. You can reach this portal by using the same Support Portal link you already have.

For more information on opening a support ticket, click here.

Bug Fixes

  • Cases > Alerts > Side drawer When double clicking on a field in side drawer, the box that opens does not have the text wrapped properly (ID #12409)