What's new in CylanceGUARD

What's new in the September 2023 update

New interactive Dashboard screen
: The new Dashboard screen is now generally available in the

CylanceGUARD

portal. It includes three views that are preconfigured out-of-box and designed for efficient use:

Executive Summary view: This view provides a high level view of the overall protection status and threat landscape, such as visualizations of open and resolved alerts, as well as a map of threat sources.

Operations view: This view provides a quick report of the open escalations and top types of threats allowing users to target high priority threats and resolve them as soon as possible.

Threat Summary view: This view provides a quick report of the number of incidents, escalated incidents, open escalations, and the top rules that were applied to fewest devices, allowing users to see the effectiveness of their threat strategy and take necessary action.

What's new in the December 2022 update

New interactive Dashboard screen (preview)
: The Dashboard screen in the CylanceGUARD portal has a new interactive layout that visually displays the types of alerts that were escalated in your organization, as well as top threats by alert type or target. The new screen is currently available as a beta preview of the upcoming dashboard features. During the preview and until the general release, you can switch between the original and new dashboard screens.

You can set the timeframe to limit the data that is presented on the dashboard. For example, you can limit the data to the last 24 hours so that you only view a list of escalations that occurred in that timeframe. If you manage multiple child organizations, you can also limit the results to specific organizations. These settings can be found on the top right of the Dashboard page.

View a list of open escalations that might require your attention, such as those with critical and high severity. You can click on an alert to quickly jump to its details.

View a graph of escalations to see the ratio of unresolved threats by severity, as well as threats that were already resolved. You can click on parts of this widget to view a list of all open escalations, or view a list of open escalations of a specific severity.

View the average time for analysts to escalate and close alerts in the last 30 days.

View the number of devices that were targeted.

View the status of overall alerts by severity.

View a map of threat sources to understand where attacks are originating from. You can click the numbers that appear on the map to see the severity of threats for each geographic area.

View the top alert types to see the alert types (such as memory exploit attempts, script control threats, and network threats) that are reported most frequently in your organization.

View the top scripts to see the scripts that are run the most often in your organization that are also generating alerts. Hover over a script in the list to see the full directory path to the script.

View the top targeted processes to see the processes that are most often targeted by threats.

View the top targeted devices to see the devices that are generating the most alerts.

What's new in the November 2022 update

CylanceGUARD
has a new look
: The

CylanceGUARD

portal now has the same theme as the

Cylance Endpoint Security

management console. The change does not impact the capabilities of the portal.