- Update for multiple results in a Tanium CSV, cycles through each host/baseline combination and does a lookup on that template type to fill results grouped by host/baseline
- HBSS SCAP processing now correctly
- Saving of Compliance Summary Scores for faster loading and additional reporting of Continuous Monitoring for compliance by family
- Added charts to show compliance percentage by family and by control or subcontrol, current or historical monitoring
- Remove inherited control when the underlying system package control information removes 1 or more checklists or compliance statements referenced
- Show all compliance statements in the listing per system package, including those you inherit (cannot edit or remove them from this screen)
- Show all compliance statements, including those you inherit, in the SSP Control to Vulnerability Matrix correctly
- Faster loading of compliance results and pagination/searching
- Faster loading of bulk vulnerability searching for edits and locks
- Asynchronous saving of compliance data generated
- Update for pulling the IP and MAC for non 127.0.0.1 and no 00:00: type MAC addresses with multiple entries (we make them comma separated)
- Update for allowing a larger IP and MAC field when editing checklists to clean that up, if you need
- Update for the System Vuln report to do a “contains” versus “equals” on vulnerability number searching
- Ability to pull multiple checklists for hosts/baseline scans from Nessus Audit Compliance .nessus files for DISA and CIS benchmarks all done in one pass
- Added a visual showing the spinner while uploading and processing larger checklist and patch files
- Updated the chart bubble size on Team Subpackage charts for better visual effect
- Updated the hardware form UI to say “Virtual Device” versus “Virtual Machine”
- Added API calls for compliance score and score history
- Updated the compliance record listing and checklist listing for a system package by adding page= and limit= for pagination on larger packages
- Allow report for searching on Vulnerabilities to have a partial match for results
- Ability to create Compliance via API call
- Increase timeout for UI upload and backend processing to 10 minutes
- Increase the maximum size of checklist / scan uploads to 100B to allow larger Nessus Compliance and Tanium CSV results
- Increase the timeout in NGINX for uploading large files
- Update NGINX settings for gzip compression on larger data results
- Minor bug fixes on showing history when only 1 (current) item exists for patches and checklists
- Latest DISA Templates from October and November releases https://public.cyber.mil/stigs/downloads/ – 98 new or updated checklists
- Fixed bug on notification for inheriting system package to know when the underlying package compliance is updated
- Fixed bug on adding inherited controls marked N/A being added to the POAM (now not doing that, only Open or Not Reviewed)
- Fixed bug on date ordering by actual date correctly (date versus a “string”)
- Fixed bug on score history always including “current” regardless of filtered date range
- Fixed a bug on compliance saving too large of a record in MongoDB
- Fixed case insensitive “hostname” when uploading CKL, SCAP, Nessus, ARF XML type baseline scan files for checklists in case people use different cases from the scans
- Fixed checklist ZIP download filename when a “/” is in the filename based on STIG type
- Fixed bug on software edit history showing an extra menu
- Fixed the bulk edit vulnerability and lock UI sorting columns to sort by vulnerability and allow other sorting
- Fixed a bug on uploading JSON technology vulnerability data for proper updating when no changes occurred
- Fixed a bug setting POAM status on manually added items