Stay informed with our new Weekly Summary + New User Added detection

[#1]

Hello Beacon Community! We have a couple of exciting new features to share with you.

First, we are thrilled to announce that we have launched a weekly summary which will be shared via Slack and Teams. This summary will give you a snapshot of the alerts received and closed during the week to help you stay on top of anomalous behavior detected in your organization.

Second, we have introduced a new detection that will alert you whenever new users are added to Beacon. This detection will fire when you enter Beacon for the first time and is a great way for you to familiarize yourself with how to investigate an alert. This detection will also be set off whenever any subsequent users are added to Beacon to ensure that only authorized individuals have access to its sensitive information.

 

 

We would love to hear from you! What do you think of these new features? Do you think these will be helpful? Is there more you wish Beacon could do? Please leave a comment below. If you have ideas for detections, you can use the Request new detection feature at the top right of the Detections tab. If you need assistance or have other feedback, please reach out to us via the blue Intercom bubble in the bottom right corner.

Cheers,

Audrey Garcia

Product Manager - Beacon

[Kalin U]

I think that the weekly summary should include the name of the organization. In our case we receive several such summaries (because we manage several organizations) and it's difficult to say which summary is for which organization.

The new alert is very much welcome. Thanks for posting.

[Audrey Garcia]

That is great feedback, thank you for sharing Kalin! I'll take this back to the team :) 

[Tomislav Tobijas _Koios_]

Agree with Kalin 👍

@Kalin U, one question: have you got all alerts/Beacon sites connected to the same channel? If yes, why not separate them by channels?

[Kalin U]

@Tomislav Tobijas _Koios_ We do use different channels (not for this kind of alerts though). I like your suggestion (because it will work), but for the sake of easier maintenance (channels access, Beacon config), I'd prefer to continue receiving them all in a single channel.