Perch Service Status Page
A webpage that shows the current status and health of Perch service. Any outages/service issues/maintenance/etc can be shown here with ETRs and actively updated. This will allow us as clients to stay up to date on any service issues.
Integration failure alerts
A global email alert when any integration has failures. We had a sensor offline for an extended time because the CW Manage integration failed (but tests ok!) and never alerted us.
Add a health column for intelligence/sensorsensor
Adding a health status to intelligence/sensor page. This would allow a quick view of sensor status without going into each one to see if they are in a healthy or error state.
Azure ADDS integration
Will there be an integration with Azure Active Directory Domain Services to monitor user account change for example?
Menu navigation for Log shippers
Add a menu nav under "Intelligence" when clicked will display all log shippers for selected company.
ingest DNS traffic and logs
Would like to be able to pull in DNS traffic from sensors as well logshipper agent.
Log Shipper centralized updates via policy
A method where we build policies within the portal (modules and their configurations) assign them to relevant shippers and its pulled down. No more manual changes to the auditbeat config files and such. Also adding tamper protection check boxes in the portal to make uninstall very difficult.
Active Directory Integration - SOAR functionality to disable/enable user accounts
Add SOAR functionality to disable/enable user accounts