Breadcrumbs

18.3

Enhancements

MITRE ATT&CK Monitor

att_2_for_1441693699.png

The MITRE ATT&CK Monitor is now a native page in the new UI. Detection search criteria use an editable field-operator-value condition builder, allowing saved conditions to be reopened and edited. Additional enhancements include the ability to move around the matrix by dragging it in any direction, export technique details to Excel, and insert tactic columns using the att_3_for_1441693699.png button.

View Tactic Insertion Button

att_4_for_1441693699.gif

Download Control for the APD Narrative Widget

att_5_for_1441693699.png

The att_6_for_1441693699.png button in the Morpheus APD Narrative widget, in the new UI, has moved from the widget body to the header, immediately left of the expand icon. The button appears only when downloadable investigation content is available and includes a tooltip on hover. This change leaves more space in the widget body for the narrative. Download behavior remains unchanged.

Morpheus APD Narrative Report Section

att_7_for_1441693699.png

An additional Morpheus APD Narrative section is now available in the exported incident report, selectable in the Export Incident Report dialog in both the new UI and the classic view. This removes the need for analysts to copy the narrative manually from the incident workspace. The section appears only for APD-generated incidents that include an investigation narrative.

Events Summary Field Display

Events Summary Field Display (1).png

The Events Summary widget now displays all event fields by default in both the new UI and classic view. Show less now appears by default, replacing Show all as the initial button. After the field list is collapsed, Show all becomes available to restore the full list. Text that exceeds a single line now wraps to up to three lines, allowing more content to remain visible before Show More is required. Event cards with many fields now use internal scrolling to maintain a compact layout.

New Tab Access for Incidents

att_9_for_1441693699.png

Clicking an incident number in the Incidents dashboard now opens the incident in a new browser tab in both the new UI and classic view. In the new UI, View Full Details in the incident side panel also opens the incident in a new tab. Analysts can investigate multiple incidents in parallel while keeping the Incidents dashboard open, reducing the need to repeatedly navigate back to the dashboard.