Management console and platform services

Alerts view enhancement:

Cylance Assistant

for

CylanceOPTICS

alert groups

In the Alerts view, you can use the AI-powered

Cylance Assistant

to provide a summary analysis of a

CylanceOPTICS

alert group, and detailed analysis for process artifacts within the group (for example, command line processes). The

Cylance Assistant

leverages rich cybersecurity knowledge sources to provide valuable information to aid you in your threat investigations.

For more information, see Use the AI-powered Cylance Assistant to investigate alerts in the

Cylance Endpoint Security

Administration content.

Alerts view enhancement: Support for script control alerts

The Alerts view now supports

CylancePROTECT Desktop

script control alerts, including the ability to add a file associated with a script control alert to the global safe list.

For more information, see Managing alerts across Cylance Endpoint Security services in the

Cylance Endpoint Security

Administration content.

Alerts view enhancements

For more information, see Managing alerts across Cylance Endpoint Security services in the

Cylance Endpoint Security

Administration content.

Console sign in enhancement

By default, new tenants now require administrators to enter a one-time password, in addition to the

Cylance

console password, each time that they try to access the console. Existing customers can update the authentication policy to add the One-Time Password requirement. New tenants can remove the One-Time Password requirement after an administrator sign-in to the console for the first time.

For more information, see Enhanced authentication sign in.

User Policy enhancements

The following enhancements have been made to the "Add User or Group" setting (Policies > User Policy) in the management console:

You can now search for users and user groups under separate tabs.
The search results are displayed in alphabetical order based on a user's or user group's name.
By default, a maximum of 50 search results are returned for users and groups, respectively. Administrators must refine their search criteria when more than 50 search results are returned.

Support for IDP-initiated Single Sign On

Administrators can now configure their environment so that users can access the

Cylance

console directly from their Identity provider (IDP). If your authenticator was created before December 2023, you can update their environment to enable IDP-initiated Single Sign On to the Cylance console. For more information, see Enhanced authentication sign in.