October 2022 Halcyon Web UI Updates Release Note

Overview:

Halcyon is pleased to announce that the following Web UI updates have been deployed for general availability

What's New:

Inactivity Timer:

An inactivity timer and an option to stay signed in are now present in the console.  When first logging in, you will be presented with an option to remain signed in if there is an extended period of inactivity:

If you choose 'No' your session will be terminated after 30 minutes of inactivity.

If you choose 'Yes' your session will be terminated after 8 hours of inactivity.

Event Feed:

Located under Settings, this feature allows you to configure a connector to a SIEM or log data collector to receive real time incoming event data.  Note that events sent through the event feed are the raw events coming directly from Halcyon Agent(s) themselves and are not aggregated or triaged. Therefore, the feed may contain a larger set of events than what is presented from the Console.

Once configured, line orientated JSON will be sent to your receiver in a format similar to:

{"id":"<UUID>","device_id":"<UUID>","tenant_id":"<UUID>","device_name":"<STRING>","occurrence_date":"2022-10-16T00:42:04+00:00","name":"<STRING>","action_type":"Block","threat_id":"<HEX STRING>","executable_path":"<STRING>","executing_user":"<STRING>","count":1,"reason":"<STRING>","guid":"<UUID>","deleted_at":"<NULL | DATE STRING>","type":"ExecutionEvent"}