π Happy New Year! π Verosint has lots of great things planned for you in 2024. Get excited!
We added a new signal, ip.privacyProvider, which gives you the name of the IP privacy service provider when an IP is on a VPN, relay service, proxy, or is hosted. π₯
ip.privacyProvider signal in Rules
Example of how to use ip.privacyProvider in a rule set
We've added autosuggest when you're typing in Explorer, making it easier and faster for you to get where you're going!
Autosuggest in Explorer
π We're always looking to improve your experience.
Did you notice how we activate the name and count of the tab you're looking at? And grey out the rest of the tabs you're not? We did this so you can easily focus on the info you care about.
We added the Account ID as secondary text in the IPs, Prints, Emails, and Phones tabs, so that you can quickly tell which account is associated with said IP, Print ID, Email, or Phone Number.
π New feature alert! The Verosint elves are working around the clock to bring you all the holiday treats!
Event Risk Score: We put our Event Risk Score in the Events tab of the Explorer page. This risk score is calculated every time an event occurs on your platform - a log out, a rule evaluation, etc. - and gives you a sense of how risky any given activity is.
The score ranges from 0 (safe) to 100 (risky).
Event Risk Score on the Explorer, Events tab
Added 18 new event types for Auth0: We added the following event types so you can expand your view of user activity.
π We're always working to improve your experience.
Previously, if you were on any of the Account Settings pages in your production workspace, then switched to the Verosint Demo workspace (where the Account Settings are disabled), you would see a 404 Not Found error page. Womp womp.
Switching to workspaces with disabled views no longer results in a 404 error
Now, if you switch to the Verosint Demo workspace, you land on the home page. #GracefulFailure #GratefulForGraceful
Left click on charts to add filter(s):You can now add more filters to your search in Explorer by left-clicking on any of the charts:
Events by Type: Filter by date range, Successful, Failed, or Rule Evaluations event types
Location: Filter by continent
Heat maps: Filter by date range, a specific Account ID, IP, Print, Email, or Phone
Left click on charts to add filters to your search in Explorer
π We're always looking to improve your experience.
Previously some of the "copy" icons in the side panels of the SignalPrint graph were grey, which made them look disabled / unclickable. We've updated them to Verosint blue so that you can easily tell which fields can be clicked to copy! π
We've added two new event types: logout successful and logout failed making it easier to track when someone is exiting your platform
Click & drag to update the date filter: See something you want to dig into in the Events by Type chart in Explorer? Zoom in on a specific date & time period by clicking and dragging your mouse across the chart π π
π We're always looking to improve your experience.
You can now copy and paste the invitation link to your workspace so you can easily pass it along to someone you invited.
We've added two new event types: Signup success and Signup failed so you can easily tell when a new user has registered (or not) on your platform.
GROUP BY functionality in Explorer charts
We added a Group By feature to the heat maps on the IPs, Prints, Emails, and Phone tabs so that you can easily get more context on your users' activity.
For example, what countries are your users coming from? π
In the IPs tab, selecting the ip.location.country option in the Group By dropdown will answer this question. In the Verosint Demo workspace, most activity is coming from the United States πΊπΈ, Norway, and Russia π·πΊ.
Group by Country in the IP addresses tab
By clicking on the black caret icon, you can see all the IPs grouped within a given country (see image below).
IP addresses from the U.S.
Other examples of Group By functionality include:
Prints: What types of devices are accessing your systems? Most activity is via desktops or mobile phones -- but there are also bots! π²
Group by Device Type in the Prints tab
Emails: What email servers (aka domains) are most of your users using? The top 3 email domains are Yahoo, Hotmail, and Comcast.
Group by Email Server (aka Domains) in the Emails tab
Phones: What phone carriers do most of your users have? The top 3 phone carriers are New Cingular Wireless, T-Mobile, and Level 3 Communications.
Group by Phone Carrier in the Phones tab
π Improvements π
We're constantly working to give you the best user experience. Here's the latest:
There were some longstanding π¨ email domains that were being mistaken for newly created domains. π squashed!
The CSV download for our Events tab in Explorer was missing columns! π Fixed it! β
We just released the Prints, Emails, and Phones tabs in Explorer, making it easier for you to spot suspicious activity on your platform!
Prints - A Print represents a specific device.
With the heat map, you can quickly see which prints are generating the most activity on your platform.
Keep an eye out for Prints with too many accounts β οΈ (as in our example below). That may warrant further investigation.
Emails
Our Emails tab can provide more context about an account on your platform, especially if that's how your users sign up.
We make it easy for you to see newly registered domains β οΈ, which bad actors often use in cybercrimes. See our example data below.
Phones
Our Phones tab can provide more context about an account on your platform, especially if that's how your users sign up.
Multiple accounts associated with a single phone number can be suspicious.
β₯οΈImprovements & Polish π
We're always looking for ways to improve your user experience. The latest include:
In Explorer, we grey out the GRAPH icon if there has been no activity in the last 30 days (so you're not staring at a blank SignalPrint graph).
Did something feel better when you looked at our heat maps? Hint: we added very light grey tiles when there is no activity, making it easier to see when activity did or did not occur.
When you search for something in the SignalPrint graph, the nodes don't shift around anymore, making it easier to focus on what you're looking at. π
We fixed column sorting! Now you can sort columns in either ascending or descending order to quickly spot suspicious activity. β¬οΈ β¬οΈ
When you have a team working together and not everyone majored in English, you run into inconsistent names. In our case, there were rules sets and rule sets. We fixed it! (And for the record, they're rule sets π).
There were some cases in the SignalPrint graph where once you expanded all the nodes, the final graph of connections was not always the same. Fixed! β
The email.parked signal was missing in a few places in the UI, but now it's back! We recommend using it in the Explorer to search for parked domains, which bad actors can use to redirect users to malicious sites.
We improved our email.disposable signal by including an additional 240 domains from one of the big providers, yopmail.com. This makes it easier for you to see if new users are signed up with a disposable email address (which is something bad actors tend to do π«).
We added an IP Address tab to the Explorer experience so that when you look at a set of events, you can also see the IPs associated with that activity.
Verosint Demo - IP Address tab
The IPs tab includes a heat map of IP activity and a table of results based on your search filter(s). By default, both are sorted to display the IPs with the greatest activity at the top. You can also downloads a CSV of the IPs table.
Now you can share your search with a link π or π bookmark a set of search filters in Explorer
We added an Accounts tab to the Explorer experience so that when you look at a set of events, you can also see the accounts associated with that activity.
Verosint Demo - Accounts tab
The Accounts tab includes a heat map chart of account activity and a table of results based on your search filter(s). By default, both are sorted to display the accounts with the greatest activity at the top.
π½ You can also download a CSV of the Events or Accounts table
We're constantly polishing the app to bring you the best user experience!
Fixed # of bars displayed regardless of date range selected: In the Events by Type chart, we display a fixed number of bars regardless of the date range selected so that the chart is easier on the π
Fixed number of bars at Last 12 Hours
Fixed number of bars at Last 30 Days
More intuitive search process in Explorer
When you type in value(s) for filters that accept multiple inputs, clicking away or pressing the tab button will automatically activate the Search button, making it faster for you to get results
We also renamed the "Filter" button to "Search" instead π