Version 4.8
New features
- Capture of FTP transfers
- Downloads page improvements
- Improved analysis reports
- Audit log
Capture of FTP transfers
Lastline Enterprise can now capture and analyze files transfered over the monitored network using the FTP protocol.
Downloads page improvements
The downloads page of the Lastline Enterprise Portal has been enhanced with a number of improvements
- display full URL
- display ftp download details
- display http referer
- display filename from HTTP content-disposition header
- filter downloads by application protocol (HTTP, FTP)
- display name of file that was extracted from an archive
Improved analysis reports
File analysis reports have been improved by adding the following features:
- the relationship between analysis subjects (processes monitored during the analysis) is shown graphically
- it is possible to highlight analysis subjects that exhibit specific classes of behaviors (e.g., network activity, console I/O)
URL analysis reports have been improved by adding the following features:
- the relationship between visited web pages is shown graphically
- it is possible to download the content of the web pages that were visited during an analysis
- the report displays the JavaScript code that was dynamically evaluated when visiting the submitted URLs
Audit log
This release introduces an audit log, which collects and displays security-relevant and other critical activities performed on the system. At the moment, the audit log stores records of user logins on the manager interface. The audit log interface can be accessed in the audit log section of the administration page.