Skylight interceptor 23.11 Release Notes

Executive Summary

This article highlights the new features and enhancements for Skylight Interceptor 23.11.

DSL Rules Feed

• Interceptor provides a list of DSL rules (detections) curated by Accedian
• Enables quicker response to new threats
• Add, edit, or remove DSL detections for all deployments simultaneously
• Examples of DSL detections can be provided for customers who want to add their own detections

Alert Cluster View

• This feature provides another way of viewing incidents

Honeypot Enhancements

• Added support for arm64 arch to support small form factor boards such as Raspberry Pi

Allowlist Enhancements

• Add condition values from an alert
• View a list of existing allowlist rules for a chosen detection
• Time condition template can be added, edited, or deleted
• Added instant navigation to the detection page