Release Notes: Here's What's New in Your Ontic Platform
Release Date: Week of August 12, 2019
Collections
What it is: Collections, as the name suggests, allows you to create your own personalized collection of content, where you can pin any content (Entity/Signal) to a board for future reference.
For Ex: ‘Your daily tasks’, ‘Follow up with a Colleague’, ‘Weekly Review’, you can create as many collections as you like, and simply start pinning the content to the collection.
Why it matters: For an Analyst, this helps to create a quick collection of all the interesting items they may have found while investigating. This will also help the Analyst to Pin content to be reviewed or reported for future reference.
How it works: Begin by clicking on the new collections icon (highlighted by the green box below) located near “add entity” blue box in the masthead.
Access Collection Add New Collection
Pin Signals to Collections from Feeds
Pin Entities to Collections
Edit/Delete Collections Add New Collections
Universal Search
What it is: A new ability to search for Entities, Signal Profiles and Documents across everything stored within the Ontic platform. Documents even include scanning of stored images like drivers licenses, scanned passports, scanned email copies, and more.
Why it matters: This universal search will help provide quick access to content stored deep within the Ontic platform. Especially beneficial when non-standardized reports (police reports, incident reports, outside departments, etc) are saved to the system.
Additionally, if you upload an image/doc/pdf of an email containing information about and entity, the document search feature will scan for keywords embedded within the images themselves.
How it works:
To search for Entity/Signal Profiles:
In the Search bar located in the masthead, select one of the new (drop down) options to search for Entities, Signal Profiles or Documents.
When a query is added in search, all the matching data points (including any file name matches) will be displayed along with the field that are matched.
To Search for a document:
When a document search is initiated, the keyword is searched for in document title as well as the content of the document itself.
Supported formats for both filename & content include:
|
|
|
|
|
|
For other file Formats, only the file name will be searched against.
Search & Preview of Results
View All Results:
Clicking on the blue “view all results” bar will display additional result details in a column based list view. Here details on the results and “matched by” details will be displayed along with other relevant information.
Move an Entity Across Workspaces
What it is: If an entity belongs to a workspace, this Admin level feature helps to move that entity to another desired Workspace.
Why it matters: While an entity may have been created in one workspace, over time that Entity could become the responsibility or interest of another team member in a different workspace. This new feature allows you to move that entity to a different workspace, where the entity profile can be viewed and edited.
How it works:
This Admin level feature can be accessed from any Entity menu, either from the Entity Dashboard or from Entity Details.
To Move an Entity:
Select “Manage Workspace” from Entity Level options
From the Manage Entity dialog → switch to “Move into Different Workspace”.
When Entity is moved, all the data associated with that Entity is visible in the New Workspace.
Note: Only Admin-level users can move the Entities between Workspaces.
Principal Support v1.0
What it is: This feature gives you a full picture of the asset you are protecting, their vulnerabilities & threats, along with the collection of intelligence to support investigations.
Why it matters: You can now associate topics & POIs who may be a potential threat to the Principal who can be categorized as a Person, Location, Event or Group.
How it works:
Create a Principal (Person, Location, Event or Group)
As an Admin, from Administration Section -> Select Principal
Associate Principal with the Topic
Location Tracker/Activity v1.0
What it is: A new workspace-level intelligence feed to track all the location data identified within the Platform.
Why it matters: This feed view (column) will help you track all new location information associated with your entities in one place.
How it works: From the Intelligence Feeds (Beta) primary navigation link, click on +New Feed, then select “Location Activity” feed located under Live Signals.
Currently Supported:
Entity Addresses changes
Location updates from new Human Observation signals
Location Activity Feeds: Location Activity Filter
Default User Dashboards
What it is: A predefined user level dashboard in feeds for new users to the Ontic platform
Why it matters: When a new user is added to the Ontic system, that user will have a predefined dashboard they can begin using immediately. The purpose is to help a new user familiarize themselves with feed dashboards before they edit or create new ones themselves.
How it works: When a newly added user logins for the first time, by default (2) predefined feed dashboards will be visible:
My Feeds
Live Signals
These are user-editable Dashboards.
Live Signals: All Intelligence; Open Source; Human Intelligence; Live Preview
My Feeds: System Alerts; Subscribed Entities; Subscribed Topics; Team Collaboration
Restrict On-Boarding Users
What it is: This new enhancement in the User section of “Administration” will help Admins onboard users only after the platform configuration setup is completed.
Why it matters: If an admin wants to set up and configure a user’s environment, but does not want to give access until the configuration is complete, this would provide more flexibility (so that the user is not subjected to user welcome email process before the setup is complete).
How it works: When adding a new user to the Ontic Platform, if the Admin enables “On Board User”, a Welcome email is sent immediately to the user.
On the other hand, if an Admin disables “On Board User”, an Inactive User is added within Ontic with an option to send email when “On Board User” button is checked.
Only when “On Board User” is checked, will a Welcome Email be sent to the new user.
OTHERS:
BOLO Filter in Entity Feeds
New Filter has been added in the Entities Feeds to filter put Signals from BOLO Entities
Notification display when Risk Intelligence icon is enabled for an Entity
When any Risk generating data points are added, a user notification is displayed in UI as “Risk Intelligence Enabled” on that entity
Warning pop up when clicking on Social profiles
A warning message is displayed in UI when the user exits Ontic to outside websites that might track Ontic User. Currently Supported for Facebook & LinkedIn
Filter by City, State and Country
New Filter is added to the Topics Stream Feed which can filter out Signals based on City, State & Country.