We are happy to announce the latest version of GREYCORTEX MENDEL. Version 2.8 includes three new important features: the first is the Event Collector. Released as part of v2.7 (a limited release), the Event Collector offers the opportunity to centrally monitor events from several remote GREYCORTEX MENDEL collectors. The second major new feature is the Correlation Engine. This tool correlates individual, less-serious events – which together may be indicative of attacks within the network, to more effectively alert security analysts. Finally, MENDEL 2.8 includes proxy pairing functionality which identifies source or destination addresses hidden by proxy servers, which will allow security analysts to better identify potential issues on the network and provide even greater visibility.
New Features
- Added a beta version of the Correlation Engine, including seven tuned rules which further increase security (The feature may be turned on by going to Settings->System Components)
- Added a proxy pairing feature to display source or destination addresses hidden by a proxy server
Improvements
- Optimized the display of charts and tables in the Network module
- Added information about the type of key exchange algorithms in HTTPS and TLS flows
- Improved the calculation of flow metrics to show values valid for specific parts
Bug Fixes
- Fixed issues with disabling deep packet inspection and enabling rules in IDS
- Fixed an issue with updates to older installations
- Fixed issues with MS-SQL protocol parsing at higher speeds
- Fixed an issue with displaying current values on the Network Services tab
- Fixed an issue with displaying multiple VLAN IDs in a single flow
- Fixed issues with parsing SMB flows
- Fixed issues with editing export definitions
- Fixed an issue with pagination results in the Peers graph
- Fixed issues with restarting services
- Fixed an issue with filtering by protocol type
- Fixed an issue with deleting user-defined filters
- Fixed an issue with saving user-created or user-defined filters
- Fixed an issue with displaying VLAN statistics in the Analysis module
- Fixed an issue with exporting records in CEF and Syslog formats
- Fixed an issue with long hostnames
- Fixed issues with calculating the minimum and maximum duration of flows
- Fixed link formatting in Exports
- Fixed an issue with displaying ASN names in flows
- Fixed an issue with displaying host information in the Analysis module
- Fixed the calculation of RTT and ART metrics in long term flows with unfinished communication
- Fixed an issue with the validation of row counts in Column Manager