GreyNoise releases redesigned Visualizer with sidebar navigation, unified IP context and built-in automation
GreyNoise has released a redesigned GreyNoise Visualizer with a persistent sidebar organized into three areas: Intelligence (IPs and CVEs), Observation (Deception Sensors) and Automation (alerts, feeds, blocklists). The update is product news and describes no threat, vulnerability or incident. It adds global search (Command + K) across IPs, Callback, CVEs and Tags, and shows GreyNoise Query Language (GNQL) terms as editable badges. The IP details page now combines up to three datasets (Scanner, Callback, Business Service), and a GNQL search can be turned directly into an alert or blocklist.
Technical Details
- Observation covers deploying and managing Deception Sensors, assigning profiles, and inspecting captured sessions in list, graph or multi-pane views, with PCAP available per session.
- Post-compromise activity captured by sensors is mapped to MITRE ATT&CK tactics and techniques, and can be compared with the wider GreyNoise sensor network.
- Automation brings Alerts, Feeds and Blocklists together. Alerts can be created from the IP, Tag and CVE workflows, and Feeds can stream GreyNoise events to downstream systems.
- Compare is now a view within IP search, and IP and CVE bulk analysis sit together under Analysis.
Remediation
No remediation is required. Users logged in to the Classic Visualizer can switch with "Try the New Visualizer", and the preference is saved to their account.
Linha do tempo
-
GreyNoise releases redesigned Visualizer with sidebar navigation, unified IP context and built-in automation
ler a análise desta fonte ocultar
GreyNoise has released a redesigned GreyNoise Visualizer with a persistent sidebar organized into three areas: Intelligence (IPs and CVEs), Observation (Deception Sensors) and Automation (alerts, feeds, blocklists). The update is product news and describes no threat, vulnerability or incident. It adds global search (Command + K) across IPs, Callback, CVEs and Tags, and shows GreyNoise Query Language (GNQL) terms as editable badges. The IP details page now combines up to three datasets (Scanner, Callback, Business Service), and a GNQL search can be turned directly into an alert or blocklist.
Technical Details
- Observation covers deploying and managing Deception Sensors, assigning profiles, and inspecting captured sessions in list, graph or multi-pane views, with PCAP available per session.
- Post-compromise activity captured by sensors is mapped to MITRE ATT&CK tactics and techniques, and can be compared with the wider GreyNoise sensor network.
- Automation brings Alerts, Feeds and Blocklists together. Alerts can be created from the IP, Tag and CVE workflows, and Feeds can stream GreyNoise events to downstream systems.
- Compare is now a view within IP search, and IP and CVE bulk analysis sit together under Analysis.
Remediation
No remediation is required. Users logged in to the Classic Visualizer can switch with "Try the New Visualizer", and the preference is saved to their account.