Here are the release notes for the latest version of Attic, launched on July 18. A version packed with new functionality and security content!
Attic App
Configs
Attic keeps certain configurations relevant to a Microsoft tenant in the background. These include registered domains, licenses, and email addresses excluded from certain email policies, as well as the name of the Emergency access account. Until now, it was necessary to have an Attic employee change these configs, and they were not visible in the App.
From this release, Configs are visible in the mobile app. Go to the solution and see the new settings icon at the top right leading to the configuration. Changing configs is still on hold as we want to thoroughly pen-test it. Once completed, it will just be a matter of flipping a switch, allowing you to manage the configuration yourself.
Configs are also visible in relevant Checks and will later be directly modifiable from a Ticket for a Check/Fix that applies to that config.
Themes
We’ve been working on theme tickets for a while. The checks in Attic look at very specific settings. It doesn’t fit with Attic’s promise to treat all these settings individually. Instead, we want to bundle checks related to a similar theme into one Theme Ticket. The Theme Tickets also have an educational purpose. We want to explain to Attic users what can go wrong in the Microsoft environment and what can be done about it. Therefore, each theme has a dedicated page in the help center, which we will gradually expand with good explanations about the topic.
When Attic is linked to a new Tenant, we will offer the Themes one by one. At this moment, after onboarding, there are 16 themes. In a Theme Ticket, you can choose which settings you want Attic to monitor, which Fixes should be executed, and set the relevant Configs. Afterward, any triggering Checks will lead to individual alarms.
Profile Page
Managing your Attic account, initiating new services, and managing existing services has been made easier. This is possible from the public website atticsecurity.com. New organizations can register via atticsecurity.com/register. While this is mainly for new users to make onboarding as easy as possible, existing users can also use it for account management tasks without necessarily needing the mobile app.
AI Assistent (beta)
At Attic, we focus on automation to keep the service scalable and affordable. At the same time, we are available for user inquiries following detections. Incident interaction seemed like an ideal area to enhance with AI. Therefore, we built an AI assistant to help quickly and efficiently respond to your questions. This assistant is fed with information from the ticket and sources such as the Attic help center. Every message generated by the assistant will first be reviewed by a human operator at Attic before being added to the incident. This is still a beta feature that is disabled by default for all customers. You can use it if you agree to share incident data with OpenAI.
Bugfixes
- Incident pages were not always loading correctly due to a new API and UUIDs. Both issues have been resolved.
- Password recovery led to errors that are now fixed.
- Our custom-built AADPrivate connector no longer worked because Microsoft blocked access to the private API. Therefore, the relevant checks have been disabled.
Partner Portal
GDAP Info
The Partner Portal now provides improved information about GDAP statuses between the Partner tenant and Customer tenants, including the ability to synchronize these statuses.