Release Notes 6.2.13 (Feb 2023)
New Features
Playbook Parallel Actions
Chronicle SOAR is excited to introduce the new feature Parallel Actions in Playbooks.
From now on you can group together actions that can run in parallel during the Playbook execution. This speeds up the Playbook run allowing you to gather information faster and cut down significantly on the time you need to investigate a case.
In addition, it allows you to organize the playbook for better readability by grouping contextual actions in parallel.
For full details on how to use parallel actions in Playbooks, click here.
Case Wall Redesign
The Case wall has been redesigned to increase ease of use and accessibility. The following changes have been made:
- Case wall tab has been moved in order to create easier access.
- Case wall has been redesigned to allow for more information to be interpreted at a glance.
Increased File Size for Case Wall Attachments
The Case wall attachment file size increased from 15MB to 50MB.
Edit and Delete Case Comments
There is now an option for users to edit and delete their own comments on the Case wall. All comments that are edited or deleted can be found in the Audit screen.
SLA Enhancements
SLA Icons
Icons indicating the type of SLA (Case SLA / Alert SLA) and the SLA status are now displayed on the Cases Screen. The color of the SLA indicates its status:
Active Case SLA | |
Active Alert SLA | |
Case SLA Critical Period | |
Alert SLA Critical Period | |
Case SLA Breached | |
Alert SLA Breached |
Set SLA by Case Priority
An SLA definition can now be configured by Case Priority directly from the Settings > Environments > SLA screen.
SLA Icons added to Homepage
- Alert SLA and Case SLA icons have been added to the Homepage.
- The side drawer displays the SLA information as well.
Alert SLAs in Cases screen
For cases with multiple alerts, the Alerts icon in "My Cases" will display all of the Alert SLAs in one popover. Each Alert SLA can be clicked on to view the individual alert.
New "Set Case SLA" Playbook action
This Playbook action enables the user to dynamically set the Case SLA. The action is available in Siemplify integration number 19.7.
For more information on SLA please refer to Setting the SLA
Command Center renamed to Incident Manager
Our Command Center is being renamed to Incident Manager to align better with our goals. Functionality remains the same.
New Notifications support
Chronicle SOAR now supports sending notifications to the case assignee for the following changes:
- Priority
- Mark as important
Bug Fixes
- After deleting a custom integration via the IDE, the integration still appears in the Marketplace.
- Alert Reduction Percentage widget logic improved ( ID #00164485)