Management console and platform services

Reset password enhancement

When users reset their password, a confirmation message that includes the email address that a reset password email is sent to will be displayed.

CylanceMDR

On-Demand

The

CylanceMDR

On-Demand subscription is a convenient and helpful option if your organization monitors the alerts that are reported to the

CylanceMDR

console. With this subscription, you can request

CylanceMDR

support on demand for any alerts that you think might be a threat but you need the time and expertise of a

CylanceMDR

analyst to help you resolve it. You can request support from an alert group in the Alerts view in the

Cylance

console.

CylanceMDR

analysts are immediately notified with the alert details and can start their investigation and assess the threat. To follow up on the investigation (for example, to share additional details), you can log in to the

CylanceMDR

(CylanceGUARD) portal and find the alert in the Escalations screen.

For more information, see View and manage aggregated alerts in the Administration content.

Alerts view enhancement:

Cylance Assistant

for

CylanceOPTICS

alert groups

In the Alerts view, you can use the AI-powered

Cylance Assistant

to provide a summary analysis of a

CylanceOPTICS

alert group, and detailed analysis for process artifacts within the group (for example, command line processes). The

Cylance Assistant

leverages rich cybersecurity knowledge sources to provide valuable information to aid you in your threat investigations.

For more information, see Use the AI-powered Cylance Assistant to investigate alerts in the

Cylance Endpoint Security

Administration content.

Alerts view enhancement: Support for script control alerts

The Alerts view now supports

CylancePROTECT Desktop

script control alerts, including the ability to add a file associated with a script control alert to the global safe list.

For more information, see Managing alerts across Cylance Endpoint Security services in the

Cylance Endpoint Security

Administration content.

Alerts view enhancements

For more information, see Managing alerts across Cylance Endpoint Security services in the

Cylance Endpoint Security

Administration content.

Console sign in enhancement

By default, new tenants now require administrators to enter a one-time password, in addition to the

Cylance

console password, each time that they try to access the console. Existing customers can update the authentication policy to add the One-Time Password requirement. New tenants can remove the One-Time Password requirement after an administrator sign-in to the console for the first time.

For more information, see Enhanced authentication sign in.

User Policy enhancements

The following enhancements have been made to the "Add User or Group" setting (Policies > User Policy) in the management console:

You can now search for users and user groups under separate tabs.
The search results are displayed in alphabetical order based on a user's or user group's name.
By default, a maximum of 50 search results are returned for users and groups, respectively. Administrators must refine their search criteria when more than 50 search results are returned.

Support for IDP-initiated Single Sign On

Administrators can now configure their environment so that users can access the

Cylance

console directly from their Identity provider (IDP). If your authenticator was created before December 2023, you can update their environment to enable IDP-initiated Single Sign On to the Cylance console. For more information, see Enhanced authentication sign in.