:bell: New feature alert! Lists allow you to group users together so you can take actions on them for any given situation (using Rule Sets).

Lists page in Verosint Demo workspace

Example Lists in Verosint Demo workspace

  • You can mix and match adding Accounts, Prints, Emails, Phone, IPs, and/or User Agents to a list.

  • Reference your list(s) in a Rule Set, and then Verosint will check the list for those identifiers when the rule set is evaluated in real time (e.g., if an Account on the Banned User list tries to sign up, deny sign up access).

    This rule set checks the Banned Users list when new users try to sign up

    This rule set checks the Banned Users list when new users try to sign up

:purple-heart: We're always looking to improve your experience.

  1. We've made if faster for you to see your data in your workspace when you upload events using our CSV template. We now validate your CSV and tell you if you're missing data or it's incomplete. Bye bye 400 errors!
  2. Did you notice that your list of workspaces are now alphabetized? (Making it easier and faster for you to switch to a different workspace :wink:)

:tada: Happy New Year! :tada: Verosint has lots of great things planned for you in 2024. Get excited!

We added a new signal, ip.privacyProvider, which gives you the name of the IP privacy service provider when an IP is on a VPN, relay service, proxy, or is hosted. :boom:

ip.privacyProvider signal in Rules

ip.privacyProvider signal in Rules

Example of how to use ip.privacyProvider in a rule set

Example of how to use ip.privacyProvider in a rule set

:bell: New feature alert!

We've added autosuggest when you're typing in Explorer, making it easier and faster for you to get where you're going!

Autosuggest in Explorer

Autosuggest in Explorer

:purple-heart: We're always looking to improve your experience.

  1. Did you notice how we activate the name and count of the tab you're looking at? And grey out the rest of the tabs you're not? We did this so you can easily focus on the info you care about.

  2. We added the Account ID as secondary text in the IPs, Prints, Emails, and Phones tabs, so that you can quickly tell which account is associated with said IP, Print ID, Email, or Phone Number.

:bell: New feature alert! The Verosint elves are working around the clock to bring you all the holiday treats!

Event Risk Score: We put our Event Risk Score in the Events tab of the Explorer page. This risk score is calculated every time an event occurs on your platform - a log out, a rule evaluation, etc. - and gives you a sense of how risky any given activity is.

The score ranges from 0 (safe) to 100 (risky).

Event Risk Score on the Explorer, Events tab

Event Risk Score on the Explorer, Events tab

Added 18 new event types for Auth0: We added the following event types so you can expand your view of user activity.

Verosint event typeAuth0 type
ACCOUNT_RECOVERY_SUCCESSgd_recovery_succeed
ACCOUNT_RECOVERY_FAILEDgd_recovery_failed
CHANGE_PASSWORD_SUCCESSscp
CHANGE_PASSWORD_FAILEDfcp
CHANGE_EMAIL_SUCCESSsce
CHANGE_EMAIL_FAILEDfce
EMAIL_SUCCESSgd_send_email
CHANGE_USERNAME_SUCCESSscu
CHANGE_USERNAME_FAILEDfcu
CHANGE_PHONE_SUCCESSscpn
CHANGE_PHONE_FAILEDfcpn
SMS_SUCCESSgd_send_sms
SMS_FAILEDgd_send_sms_failure
PUSH_NOTIFICATION_SUCCESSgd_send_pn
PUSH_NOTIFICATION_FAILEDgd_send_pn_failure
MFA_ENROLLMENT_SUCCESScombined gd_start_enrolland gd_enrollment_complete
MFA_ENROLLMENT_FAILEDgd_start_enroll_failed
MFA_DEVICE_UNENROLLEDgd_unenroll

:purple-heart: We're always working to improve your experience.

Previously, if you were on any of the Account Settings pages in your production workspace, then switched to the Verosint Demo workspace (where the Account Settings are disabled), you would see a 404 Not Found error page. Womp womp.

Switching to workspaces with disabled views no longer results in a 404 error

Switching to workspaces with disabled views no longer results in a 404 error

Now, if you switch to the Verosint Demo workspace, you land on the home page. #GracefulFailure #GratefulForGraceful

:bell: New feature alert!

Left click on charts to add filter(s):You can now add more filters to your search in Explorer by left-clicking on any of the charts:

  • Events by Type: Filter by date range, Successful, Failed, or Rule Evaluations event types
  • Location: Filter by continent
  • Heat maps: Filter by date range, a specific Account ID, IP, Print, Email, or Phone
Left click on charts to add filters to your search in Explorer

Left click on charts to add filters to your search in Explorer

:purple-heart: We're always looking to improve your experience.

Previously some of the "copy" icons in the side panels of the SignalPrint graph were grey, which made them look disabled / unclickable. We've updated them to Verosint blue so that you can easily tell which fields can be clicked to copy! :smile:

:bell: New feature alert!

  1. We've added two new event types: logout successful and logout failed making it easier to track when someone is exiting your platform
  2. Click & drag to update the date filter: See something you want to dig into in the Events by Type chart in Explorer? Zoom in on a specific date & time period by clicking and dragging your mouse across the chart :mag-right: :eyes:

:purple-heart: We're always looking to improve your experience.

You can now copy and paste the invitation link to your workspace so you can easily pass it along to someone you invited.

:bell: New feature alert!

New Event Type for Registrations

We've added two new event types: Signup success and Signup failed so you can easily tell when a new user has registered (or not) on your platform.

GROUP BY functionality in Explorer charts

We added a Group By feature to the heat maps on the IPs, Prints, Emails, and Phone tabs so that you can easily get more context on your users' activity.

For example, what countries are your users coming from? :globe-with-meridians:

In the IPs tab, selecting the ip.location.country option in the Group By dropdown will answer this question. In the Verosint Demo workspace, most activity is coming from the United States :us:, Norway, and Russia :ru:.

Group by Country in the IP addresses tab

Group by Country in the IP addresses tab

By clicking on the black caret icon, you can see all the IPs grouped within a given country (see image below).

IP addresses from the U.S.

IP addresses from the U.S.

Other examples of Group By functionality include:

Prints: What types of devices are accessing your systems? Most activity is via desktops or mobile phones -- but there are also bots! :astonished:

Group by Device Type in the Prints tab

Group by Device Type in the Prints tab

Emails: What email servers (aka domains) are most of your users using? The top 3 email domains are Yahoo, Hotmail, and Comcast.

Group by Email Server (aka Domains) in the Emails tab

Group by Email Server (aka Domains) in the Emails tab

Phones: What phone carriers do most of your users have? The top 3 phone carriers are New Cingular Wireless, T-Mobile, and Level 3 Communications.

Group by Phone Carrier in the Phones tab

Group by Phone Carrier in the Phones tab

💜 Improvements 💜

We're constantly working to give you the best user experience. Here's the latest:

  1. There were some longstanding :incoming-envelope: email domains that were being mistaken for newly created domains. :bug: squashed!
  2. The CSV download for our Events tab in Explorer was missing columns! :sweat: Fixed it! :white-check-mark:

:bell:New feature alert!

We just released the Prints, Emails, and Phones tabs in Explorer, making it easier for you to spot suspicious activity on your platform!

Prints - A Print represents a specific device.

  • With the heat map, you can quickly see which prints are generating the most activity on your platform.
  • Keep an eye out for Prints with too many accounts :warning: (as in our example below). That may warrant further investigation.

Emails

  • Our Emails tab can provide more context about an account on your platform, especially if that's how your users sign up.
  • We make it easy for you to see newly registered domains :warning:, which bad actors often use in cybercrimes. See our example data below.

Phones

  • Our Phones tab can provide more context about an account on your platform, especially if that's how your users sign up.
  • Multiple accounts associated with a single phone number can be suspicious.

:hearts:Improvements & Polish :nail-care:

We're always looking for ways to improve your user experience. The latest include:

  • In Explorer, we grey out the GRAPH icon if there has been no activity in the last 30 days (so you're not staring at a blank SignalPrint graph).
  • Did something feel better when you looked at our heat maps? Hint: we added very light grey tiles when there is no activity, making it easier to see when activity did or did not occur.
  • When you search for something in the SignalPrint graph, the nodes don't shift around anymore, making it easier to focus on what you're looking at. :eyes:
  • We fixed column sorting! Now you can sort columns in either ascending or descending order to quickly spot suspicious activity. :arrow-down: :arrow-up:
  • When you have a team working together and not everyone majored in English, you run into inconsistent names. In our case, there were rules sets and rule sets. We fixed it! (And for the record, they're rule sets :wink:).
  • There were some cases in the SignalPrint graph where once you expanded all the nodes, the final graph of connections was not always the same. Fixed! :white-check-mark:
  • The email.parked signal was missing in a few places in the UI, but now it's back! We recommend using it in the Explorer to search for parked domains, which bad actors can use to redirect users to malicious sites.
  • We improved our email.disposable signal by including an additional 240 domains from one of the big providers, yopmail.com. This makes it easier for you to see if new users are signed up with a disposable email address (which is something bad actors tend to do :no-entry-sign:).

:bell:New feature alert!

  • We added an IP Address tab to the Explorer experience so that when you look at a set of events, you can also see the IPs associated with that activity.
IP Address tab

Verosint Demo - IP Address tab

The IPs tab includes a heat map of IP activity and a table of results based on your search filter(s). By default, both are sorted to display the IPs with the greatest activity at the top. You can also downloads a CSV of the IPs table.

  • Now you can share your search with a link :link: or :bookmark: bookmark a set of search filters in Explorer

:bell:New feature alert!

  • We added an Accounts tab to the Explorer experience so that when you look at a set of events, you can also see the accounts associated with that activity.
Verosint Demo - Accounts tab

Verosint Demo - Accounts tab

The Accounts tab includes a heat map chart of account activity and a table of results based on your search filter(s). By default, both are sorted to display the accounts with the greatest activity at the top.

  • :arrow-down-small: You can also download a CSV of the Events or Accounts table