What's New, Halcyon? Halcyon Web UI Update Release Notes: October 2022

Halcyon is pleased to announce that the following Web UI updates have been deployed for general availability.

What's New:

Inactivity Timer: An inactivity timer and an option to stay signed in are now present in the console.  When first logging in, you will be presented with an option to remain signed in if there is an extended period of inactivity.  

• If you choose 'No' your session will be terminated after 30 minutes of inactivity.
• If you choose 'Yes' your session will be terminated after 8 hours of inactivity.

Event Feed: Located under Settings, this feature allows you to configure a connector to a SIEM or log data collector to receive real time incoming event data.  Note that events sent through the event feed are the raw events coming directly from Halcyon Agent(s) themselves and are not aggregated or triaged. Therefore, the feed may contain a larger set of events than what is presented from the Console.

Once configured, line orientated JSON will be sent to your receiver in a format similar to:

{"id":"<UUID>","device_id":"<UUID>","tenant_id":"<UUID>","device_name":"<STRING>","occurrence_date":"2022-10-16T00:42:04+00:00","name":"<STRING>","action_type":"Block","threat_id":"<HEX STRING>","executable_path":"<STRING>","executing_user":"<STRING>","count":1,"reason":"<STRING>","guid":"<UUID>","deleted_at":"<NULL | DATE STRING>","type":"ExecutionEvent"}  

‍

‍

Halcyon.ai is the industry’s first dedicated, adaptive security platform that combines multiple advanced proprietary prevention engines along with AI models focused specifically on stopping ransomware – talk to a Halcyon expert today to find out more. And check out the Recent Ransomware Attacks resource site to get near real-time tracking of ransomware attacks, threat actor groups and their victims.