What's New, Halcyon? Halcyon Web UI Update Release Notes: October 2022
ID: 94e0f383-4014-5d0a-8f3d-a457e75875e7
STIX ID: report--94e0f383-4014-5d0a-8f3d-a457e75875e7
Feed Name: Halcyon Blog
Halcyon Web UI release notes describe two new features: an inactivity timer that lets users choose to remain signed in (resulting in either 30-minute or 8-hour session timeouts) and an Event Feed under Settings to forward raw, line-oriented JSON events from Halcyon Agents to a configured SIEM or log collector. The Event Feed sends untriaged agent events (with fields such as id, device_id, occurrence_date, action_type, threat_id, executable_path, executing_user, count, reason, guid, and type), and the release includes a sample JSON format and notes that the feed may contain more events than shown in the Console.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
