New Features: July 2018

The following topics provide a snapshot of the AutoFocus™ features introduced in July 2018. Each section includes context for the new feature, with steps to get started.
Latest AutoFocus Features
About Each Feature
Additional Date Options for Searches
You now have the option to search for samples based on relative dates, in addition to absolute dates. Using a relative date allows you to select a date range based on the current time as a reference point. For example, you can configure a search to find malicious samples first seen three days ago.
search-relative-date.png
For more information on using the AutoFocus search, refer to:
New Widgets to Visualize Search Sessions and Samples
AutoFocus is introducing two new dashboard and report widgets to help users visualize recent sessions and samples. The contents of the widgets are based on the filter settings and can be updated to suit your reporting requirements. You can add these new widgets to AutoFocus by customizing your
Dashboard
or
Reports
.
  1. To customize your AutoFocus widget layout and contents:
    • Dashboard—Go to the
      Dashboard
      and click
      Edit Page
      .
    • Reports—Go to
      Reports
      ,
      Run
      the report you want to add the new widgets to, then click
      Edit
      page.
  2. Add Row
    and then
    Add Widget
    based on your dashboard layout preferences. Add the new widgets labeled
    Recent Samples
    and
    Recent Sessions
    to you dashboard.
    widget-recent-samples-and-sessions.png
  3. When you are finished making your dashboard changes, click
    Editing
    . If you would like to restore the dashboard settings, click
    Reset
    .
  4. The new dashboard widgets show the following information:
    You can use the filters located at the top of the report and dashboard pages to define the content shown in the widgets.
  • Recent Samples—Displays a list of recent samples based on the widget and dashboard / report filter settings. You can further customize the widget by changing the sample display settings.
    widget-recent-samples.png
  • Recent Sessions—Displays a list of recent sessions based on the widget and dashboard / report filter settings. You can further customize the widget by changing the session display settings.
    widget-recent-sessions.png
You can export widget contents into text, CSV, and JSON formats by selecting ( export-icon.png ), configuring your export details, and then clicking
Download
.
For more information about the concepts referenced in this feature, refer to:
New Hash-based Search
You now have the option to search for samples based strictly on the sample hash value.
This excludes the search from returning hashes that might be contained within other files, such as those found in the
File Activity
section of a sample details page.
  1. Create a new advanced AutoFocus search using the new
    Hash Lookup
    identifier.
    Hovering over the
    Hash
    and
    Hash Lookup
    identifiers opens a tooltip with a description.
  2. Configure the search options and click
    Search
    .
    search-hash-lookup.png
The search returns a result that matches only with the hash value of the primary sample (hashes contained in the file are not included in the results).
search-hash-lookup-match.png
For more information on using the AutoFocus search, refer to:
Customizable Widgets
You can now add a custom widget to your dashboard or any of your AutoFocus reports. This widget is populated by data from user-selectable artifacts and can be further tailored using one of five visualization options.
  1. Open an AutoFocus report or dashboard and add a widget.
  2. Select
    Custom Aggregation
    under
    Aggregates
    from the widget list.
    custom-aggregation.png
  3. Provide a name to identify the custom widget.
  4. Click
    Editing
    to exit the dashboard / report editing mode.
  5. Configure the custom widget artifact and display options:
    • Number of values
      —Configures the number of artifacts of a given type that are displayed by the widget.
    • Visualization
      —Toggles between different widget display options. Options include charts, bars, grids, pies, and treemaps.
    • Artifact
      —A searchable AutoFocus property, activity, or behavior associated with samples and sessions. Examples include upload sources, source IPs, WildFire verdicts, and file types.
    custom-widget.png
For more information about the concepts referenced in this feature, refer to:

Recommended For You