We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features made available to Splunk Enterprise Security Cloud users. The new features, detailed below, improve upon your user experience in Mission Control by:
- Simplifying collaboration and note-taking within incidents
- Enabling faster investigations by improving load times and minimizing unnecessary refreshes
- Improving visibility into the value of your Splunk SOAR integration
- Enhancing the Threat Intelligence Management admin experience (for users in the AWS US East and US West regions today).
Overall, this release continues the trajectory of Splunk Mission Control as a unified security operations application that brings together your threat detection, investigation and response workflows into a common work surface. As a reminder, Mission Control is available for all Splunk Enterprise Security Cloud users today and it’s quick and simple to enable the application. Below are more details and screenshots of our latest release and you can find more details like release notes on our documentation site.
Simpler Collaboration and Note-Taking
The notes and files features found within a response plan’s tasks are now available at the incident level, allowing greater collaboration and easier note taking. Access them within the side panel of your incident UI so that you can take notes while you peruse your other data.
Faster Task Completion with Dynamic UI Updates
Tired of waiting for a spinner every time you update a task or change an incident’s status? Wait no more! With Mission Control’s dynamic UI updates you can now perform tasks in a fraction of the time with improved load times and a streamlined UX.
Improved Splunk SOAR Integration Visibility
With improved visibility into your Splunk SOAR usage, you can learn more details instantly such as how many playbooks and actions you have run and how many connectors are being used. You can also see which playbook you are running the most and export usage reports if desired.
Easier Threat Intelligence Onboarding and Improved UX
Several improvements to the Threat Intelligence Management admin experience (for ES Cloud users in the AWS US East and US West regions) have been released which allows you to save time as you more easily activate and deactivate your threat intelligence integrations within Mission Control.
For more information on Mission Control such as a product tour, demo videos, blog posts, white papers, and webinars, please visit our home page for Splunk Mission Control.
This post was co-authored by Kavita Varadarajan, Principal Product Manager for Splunk Mission Control.
