https://cybertoolchain.io/tools/sandboxaq-aqtive-guard New releases and features in SandboxAQ AQtive Guard, tracked by The Cyber Toolchain. en Fri, 25 Sep 2026 07:51:35 GMT https://aqtiveguard.sandboxaq.com/docs/changelog/ https://aqtiveguard.sandboxaq.com/docs/changelog/ Fri, 25 Sep 2026 07:51:35 GMT AQtive Guard on-premises packages now available for RHEL 10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports RHEL 10 as a deployment target for AQtive Guard on-premises packages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/ https://aqtiveguard.sandboxaq.com/docs/changelog/ Thu, 24 Sep 2026 07:52:13 GMT SandboxAQ AQtive Guard: Adds on-premises package support for RHEL 10, enabling AQtive Guard deployment on Red Hat Enterprise Linux 10 hosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/ https://aqtiveguard.sandboxaq.com/docs/changelog/ Tue, 22 Sep 2026 07:44:54 GMT AQtive Guard on-premises packages now available for RHEL 10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports RHEL 10 as a deployment target for AQtive Guard on-premises packages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#25010-2025-01-09 https://aqtiveguard.sandboxaq.com/docs/changelog/#25010-2025-01-09 Thu, 09 Jan 2025 00:00:00 GMT SandboxAQ AQtive Guard 25.01.0 adds CrowdStrike integration for scan orchestration and a new Scans page • Adds `CrowdStrike` integration for Scan orchestration with settings and test connection functionality • Introduces new `Scans` page for filesystem scan orchestration allowing manual scans through CrowdStrike • Adds a table of scans with scan status, success, and number of affected hosts • Adds a nested hosts table with details of each host scan Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24123-2024-12-20 https://aqtiveguard.sandboxaq.com/docs/changelog/#24123-2024-12-20 Fri, 20 Dec 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.12.3 enhances Java analysis to detect Password-Based Encryption issues. • Improved detection of Password-Based Encryption issues in Java application analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24111-2024-11-13 https://aqtiveguard.sandboxaq.com/docs/changelog/#24111-2024-11-13 Wed, 13 Nov 2024 00:00:00 GMT SHA-1 rule now evaluates risk by usage context (RNG, HMAC, signature) rather than uniform severity. • Modifies SHA-1 rule severity logic to evaluate context, changing ratings from static Medium to Pass for RNG, Low for HMAC, High for digital signatures, and Medium for other uses. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24104-2024-10-30 https://aqtiveguard.sandboxaq.com/docs/changelog/#24104-2024-10-30 Wed, 30 Oct 2024 00:00:00 GMT ServiceNow integration added via new APIs (updateServiceNowIntegration, checkServiceNowIntegration, etc.) and Jira export changes. • Adds `updateServiceNowIntegration` API to configure ServiceNow integration • Adds `checkServiceNowIntegration` API to validate ServiceNow configuration • Adds `unlinkServiceNowIntegration` API to unlink a ServiceNow integration • Adds `serviceNowExportInstance` API to export a single instance to ServiceNow • Adds `serviceNowExportReport` API to export an entire report to ServiceNow • Adds `serviceNowCancelReportExport` API to cancel a bulk export to ServiceNow • Changes Jira export behavior: now exports all failed instances instead of only the 50 with highest priorities • Persists the exported URL for future reference when exporting one or more instances to Jira or ServiceNow Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24103-2024-10-23 https://aqtiveguard.sandboxaq.com/docs/changelog/#24103-2024-10-23 Wed, 23 Oct 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.10.3 reverts deprecation of jira_export_instance mutation for single-instance export. • `jira_export_instance` mutation no longer deprecated, enabling controlled single instance export via API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24102-2024-10-16 https://aqtiveguard.sandboxaq.com/docs/changelog/#24102-2024-10-16 Wed, 16 Oct 2024 00:00:00 GMT Adds ReportDone.locations and Location.instances GraphQL connections for location data retrieval. • Adds `ReportDone.locations` connection in the GraphQL API to retrieve all locations found in a report • Adds filtering support to the `Location.instances` connection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24100-2024-10-02 https://aqtiveguard.sandboxaq.com/docs/changelog/#24100-2024-10-02 Wed, 02 Oct 2024 00:00:00 GMT SandboxAQ AQtive Guard adds Tanium integration and UI enhancements in v24.10.0 • Enabled Tanium integration for retrieval process • Migrated the project settings to a new UI • Enhanced retrieval logs with more detailed and enriched data for every retrieval step Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24092-2024-09-11 https://aqtiveguard.sandboxaq.com/docs/changelog/#24092-2024-09-11 Wed, 11 Sep 2024 00:00:00 GMT Adds streaming flow API mutations for real-time application trace uploads and analysis • `createStreamUpload`, `generatePresignedPartUrls`, `finalizeStreamUpload`, and `refreshStreamUpload` mutations added to support the new streaming flow capability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24084-2024-08-28 https://aqtiveguard.sandboxaq.com/docs/changelog/#24084-2024-08-28 Wed, 28 Aug 2024 00:00:00 GMT AQtive Guard 24.08.4 consolidates system configuration and API options in a new Settings dropdown • Introduces a new 'Settings' dropdown in the menu bar to consolidate system configuration and API options including Users, Integrations, Profiles, Sensors, and API Explorer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24083-2024-08-21 https://aqtiveguard.sandboxaq.com/docs/changelog/#24083-2024-08-21 Wed, 21 Aug 2024 00:00:00 GMT Adds GraphQL filters for trace type in ReportsFilter, TracesFilter, and related connections. • `ReportsFilter.traceType` added to the GraphQL schema to filter reports by their trace type • `TracesFilter.traceType` added to the GraphQL schema to filter traces by their trace type • New `traceType` fields accepted on `Project.traces`, `Slot.traces`, `Project.reports`, `Slot.traces`, and `Trace.reports` connections for filtering Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24081-2024-08-14 https://aqtiveguard.sandboxaq.com/docs/changelog/#24081-2024-08-14 Wed, 14 Aug 2024 00:00:00 GMT Adds Network Analyzer to Sensors page UI and IAM auth support for managed secrets with DATABASE_URL. • `auth_type: "IAM"` is now supported for managed secrets labeled with `DATABASE_URL`, allowing direct AWS IAM authentication instead of static credentials. • The 'Network Analyzer' view is added to the Sensors page in the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24073-2024-07-31 https://aqtiveguard.sandboxaq.com/docs/changelog/#24073-2024-07-31 Wed, 31 Jul 2024 00:00:00 GMT Jira exports now include rule and instance numbers; UI updates for API Explorer/Knowledge Base menus and error messages. • `UI`: Menu bar is displayed on the API Explorer and Knowledge Base pages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24072-2024-07-24 https://aqtiveguard.sandboxaq.com/docs/changelog/#24072-2024-07-24 Wed, 24 Jul 2024 00:00:00 GMT SandboxAQ AQtive Guard adds PQ crypto analysis, SSH handshake parsing, and improved UI sorting. • Parse, analyze, store and display SSH handshakes from network captures • Parse, store and display Dilithium, Falcon and Sphincs keys • Independently analyze key exchange and signature algorithms for PQ readiness in TLS handshakes • `Organization.inventory`, `Project.inventory` and `ReportDone.inventory` now include Network reports via GraphQL • `Organization.vulnerabilities`, `Project.vulnerabilities` and `ReportDone.vulnerabilities` edges sorted by descending severity, descending numberOfSlots, ascending number • `Vulnerability.slots` and `ReportVulnerability.slots` connections sorted by descending instancesFailed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24071-2024-07-17 https://aqtiveguard.sandboxaq.com/docs/changelog/#24071-2024-07-17 Wed, 17 Jul 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.07.1 adds sorting and filtering for Users via GraphQL API • Added `UsersSorterFields.preferredName` field to the GraphQL API for sorting users by preferred name • Added `UsersSorterFields.origin` field to the GraphQL API for sorting users by account type • Added `UsersFilterFields.preferredName` field to the GraphQL API for filtering users by preferred name • Added `UsersFilterFields.origin` field to the GraphQL API for filtering users by account type • Added `UsersFilterFields.roles` field to the GraphQL API for filtering users by permission roles • UI Users table now supports sorting by 'Preferred name' and 'Account type' columns • UI Users table now includes filters for 'Preferred name', 'Account type', and 'Roles' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24070-2024-07-12 https://aqtiveguard.sandboxaq.com/docs/changelog/#24070-2024-07-12 Fri, 12 Jul 2024 00:00:00 GMT SandboxAQ AQtive Guard v24.07.0 adds SSH handshake visibility in reports and live secret rotation via DATABASE_URL • Adds support for viewing SSH handshakes in network report trace analysis via the Protocol selector. • Enables live rotation of managed secrets labeled with `DATABASE_URL` (e.g., via AWS Secrets Manager). • Adds GraphQL sorter fields (`SlotsSorterFields.id`, `UsersSorterFields.id`, `UsersSorterFields.current`, `ProfilesSorterFields.preset`) for sorting slots, users, and profiles in the API. Breaking changes: • The file 'cryptography_operations_statistics.csv' in bundled Report CSV export ZIP files is renamed to 'statistics.csv'. • Default report name format changed from 'Report 1 for {trace name}' to 'Report for {trace name}'. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24063-2024-06-24 https://aqtiveguard.sandboxaq.com/docs/changelog/#24063-2024-06-24 Mon, 24 Jun 2024 00:00:00 GMT AQtive Guard 24.06.3 adds RC5 analysis, RDS credential retrieval via SECRET_PROVIDER, and Jira GraphQL mutations. • `RC5` analysis added to the backend scanning engine • Enhanced `2-key-3DES` reporting capabilities • Added `SECRET_PROVIDER=JSON` support for retrieving RDS credentials in AWS deployments • Exposed `checkJiraIntegration` GraphQL mutation to validate project key and issue type • Exposed `checkJiraExport` GraphQL mutation to validate required fields and priority values for Jira exports Breaking changes: • `Handshake.client_timestamp` is renamed to `timestamp` • `Handshake.server_timestamp` field removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24061-2024-06-05 https://aqtiveguard.sandboxaq.com/docs/changelog/#24061-2024-06-05 Wed, 05 Jun 2024 00:00:00 GMT AQtive Guard 24.06.1 adds REPORT Operations tab, GraphQL project sorting/filtering by lastAnalysis, and SESSION_DURATION_SECONDS config. • Adds the `Report Operations` tab to display all cryptographic operations identified in the analysis of compatible traces • Adds the optional configuration parameter `SESSION_DURATION_SECONDS` to set the timeout of web sessions with a default value of 86400 seconds • Adds the `ProjectsSorterFields.lastAnalysis` GraphQL field to sort projects based on their last created or completed report • Adds the `ProjectsFilterFields.lastAnalysis` GraphQL field to filter projects based on their last created or completed report Breaking changes: • The `Project.lastUpdated` field is deprecated and will be removed in a future release; use the `Project.lastAnalysis` field instead • The `ProjectsFilterFields.lastUpdated` filter is deprecated and will be removed in a future release; use the `ProjectsFilterFields.lastAnalysis` filter instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24055-2024-05-30 https://aqtiveguard.sandboxaq.com/docs/changelog/#24055-2024-05-30 Thu, 30 May 2024 00:00:00 GMT 24.05.5 adds GraphQL introspection config and Tanium timeout fields to the API • Adds `ENABLE_GRAPHQL_INTROSPECTION` config value to control API introspection queries • Updates `updateTaniumIntegration` mutation to accept `requestTimeout` and `downloadRequestTimeout` inputs • Adds `requestTimeout` and `downloadRequestTimeout` fields to the `TaniumIntegration` GraphQL type Breaking changes: • The Project.tanium field now returns null if ProjectTanium.computerGroup is unset • The Organization.users and Organization.testers connections will now return an empty list if the current user does not have permission to view other Users Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24054-2024-05-22 https://aqtiveguard.sandboxaq.com/docs/changelog/#24054-2024-05-22 Wed, 22 May 2024 00:00:00 GMT Adds OperationType enum and `operationType` field to GraphQL OperationsFilterFields and OperationsSorterFields • Adds the `OperationType` enum to the GraphQL API, changing `Operation.type` return type from string to enum • Adds `value` (of OperationType enum) and `category` (of OperationCategory enum) fields to `OperationsFilterFields` and `OperationsSorterFields` types Breaking changes: • The return value of `Operation.type` changes from string to the new `OperationType` enum; clients must now use the `Operation.operationType` field to retrieve the string value. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24052-2024-05-08 https://aqtiveguard.sandboxaq.com/docs/changelog/#24052-2024-05-08 Wed, 08 May 2024 00:00:00 GMT Adds type/category operation filters and sorters to GraphQL API • `type` and `category` fields are now available in GraphQL operation filters and sorters Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24051-2024-05-01 https://aqtiveguard.sandboxaq.com/docs/changelog/#24051-2024-05-01 Wed, 01 May 2024 00:00:00 GMT AQtive Guard v24.05.1 adds GraphQL sorters/filters for callsites and operations, plus new Operation fields. • Adds `CallSitesSorter` and `CallSitesFilter` to the `CallSites` GraphQL connection to sort and filter `Report.callsites` by fields like `context` and `timestamp` • Enables sorting and filtering for `Report.operations`, `Key.operations`, `Instance.operations`, and `Certificate.operations` connections using `id`, `context`, and `timestamp` • Adds the `Operation.context` field (returning `OperationContext` enum) and `Operation.firstCallSite` field to the GraphQL schema • Adds new fields `role`, `cipherData`, `wrappedKeyId`, and `wrappedByKeyId` to the edge of the `Operation.keys` connection Breaking changes: • UI Handshakes and calls timestamps are now formatted as a ISO-8601 string Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24042-2024-04-24 https://aqtiveguard.sandboxaq.com/docs/changelog/#24042-2024-04-24 Wed, 24 Apr 2024 00:00:00 GMT Adds report certificate sorting, project slots sorters, TLS vulnerable ciphersuites detection for DES/3DES/RC4 • Added report certificate sorters in the UI. • Added project slots sorters in the UI. • Added `CertificatesSorter` to GraphQL API for sorting and filtering `Report.certificates` connection based on Certificate fields. • Added TLS vulnerable ciphersuites rules for network analysis detecting DES, 3DES & RC4. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24041-2024-04-17 https://aqtiveguard.sandboxaq.com/docs/changelog/#24041-2024-04-17 Wed, 17 Apr 2024 00:00:00 GMT Adds GraphQL Operation.timestamp/valueJson fields, Operation.calls connection, kept_by_filters arg, and cs logs bundle CLI tool • Added `Operation.timestamp`, `Operation.valueJson` fields and the `Operation.calls` connection to GraphQL schema • Added `kept_by_filters` argument to `Instance.operations`, `Instance.calls` and `Operation.calls` connections for filtering by project exceptions • Added new `cs logs bundle` CLI tool for on-premises deployments to inspect, filter and merge logs emitted by AQtive Guard services Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24040-2024-04-10 https://aqtiveguard.sandboxaq.com/docs/changelog/#24040-2024-04-10 Wed, 10 Apr 2024 00:00:00 GMT SandboxAQ AQtive Guard adds a logs subcommand, Tanium GraphQL mutations, and improved TLS detection rules in v24.04.0 • `cs on-premises logs` sub-command allows inspecting, merging and filtering logs locally • Tanium GraphQL API supports querying associated computer group and scan status fields • Rules improved to detect TLS ciphersuites using DES/3DES/RC4 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24035-2024-04-04 https://aqtiveguard.sandboxaq.com/docs/changelog/#24035-2024-04-04 Thu, 04 Apr 2024 00:00:00 GMT AQtive Guard 24.03.5 adds certificate exclusion profiles and Jira URL display • Displays the configured Jira base url in a non-editable UI field for visibility Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24034-2024-03-27 https://aqtiveguard.sandboxaq.com/docs/changelog/#24034-2024-03-27 Wed, 27 Mar 2024 00:00:00 GMT Adds request_id to logs and multiple filters to Organization.inventory/overview/vulnerabilities GraphQL API fields • Adds `request_id` field to log entries for cross-source correlation • Adds `overviewTypes`, `from`, `to`, and `withExceptions` filters to `Organization.inventory` GraphQL API field • Adds `overviewTypes` filter to `Organization.overview` GraphQL API field • Adds `overviewTypes`, `from`, `to`, and `withExceptions` filters to `Organization.vulnerabilities` GraphQL API field • Adds `overviewTypes` filter to `Organization.timeRepresentationSlices` GraphQL API field Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24033-2024-03-21 https://aqtiveguard.sandboxaq.com/docs/changelog/#24033-2024-03-21 Thu, 21 Mar 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.03.3 adds TlsHandshakeStatus enum and new fuzzer profile management UI/API features. • Adds viewing, creating and duplicating fuzzer profiles in the UI • Adds `Profile.projectCount` field to GraphQL API • Adds new `statuses` argument to `handshakes` connection in GraphQL Breaking changes: • Removed TlsOrphanHandshake type and ‘orphanHandshakes’ connection in GraphQL Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24031-2024-03-06 https://aqtiveguard.sandboxaq.com/docs/changelog/#24031-2024-03-06 Wed, 06 Mar 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.03.1 adds project exception and profile management GraphQL mutations • `Project.exceptions` connection enables retrieval of project exceptions • `ProjectExceptionsSorter` and `ProjectExceptionsFilter` added for sorting and filtering project exceptions by `ProjectException` fields • `updateProjectException` mutation allows updating an existing project exception • `deleteProjectException` mutation allows deleting a project exception • Expose `Profile` model with multiple new fields, including support for tracer and fuzzer profiles • `createTracerProfile` mutation adds a new tracer profile • `createFuzzerProfile` mutation adds a new fuzzer profile • `updateTracerProfile` mutation updates an existing tracer profile • `updateFuzzerProfile` mutation updates an existing fuzzer profile • `deleteProfile` mutation removes a profile Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24023-2024-02-21 https://aqtiveguard.sandboxaq.com/docs/changelog/#24023-2024-02-21 Wed, 21 Feb 2024 00:00:00 GMT AQtive Guard 24.02.3 adds Profile lastUsed/timesUsed fields and updates user mutations. • Adds `lastUsed` and `timesUsed` fields to the GraphQL `Profile` model • Updates `createLocalUser` mutation arguments for uniqueness, case-insensitivity, and password requirements • Updates `updateUser` mutation argument behavior for `level`, `roles`, and `authTags` Breaking changes: • The fields `Organization.keys` and `Organization.certificates` now return an empty connection for users with the "tester" level • Removed the `createOpenIdUser` mutation; use OID provider instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24022-2024-02-14 https://aqtiveguard.sandboxaq.com/docs/changelog/#24022-2024-02-14 Wed, 14 Feb 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.02.2 adds OIDC certificate config and default project sorting • Adds `OIDC_SERVER_CERT` configuration option to specify a custom CA bundle for OpenID Server SSL verification • Changes the Projects table UI to sort by creation date (most recent first) by default Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24020-2024-02-01 https://aqtiveguard.sandboxaq.com/docs/changelog/#24020-2024-02-01 Thu, 01 Feb 2024 00:00:00 GMT SandboxAQ AQtive Guard 24.02.0 adds bulk JIRA export, Venafi/Tanium GraphQL mutations, and API opt-out flags. • Adds `jiraExportInstances` mutation to create multiple JIRA issues in bulk from a list of at most 50 instance IDs • Adds `checkVenafiIntegration`, `checkTaniumIntegration`, `updateVenafiIntegration`, and `updateTaniumIntegration` GraphQL mutations for Venafi and Tanium integration management • Adds API opt-out flags to disable GraphQL and stacktrace logging Breaking changes: • The `jiraExportInstance` mutation is deprecated and will be removed in a future release; users must migrate to `jiraExportInstances`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24012-2024-01-24 https://aqtiveguard.sandboxaq.com/docs/changelog/#24012-2024-01-24 Wed, 24 Jan 2024 00:00:00 GMT Adds client_ip and forwarded_for_client_ip fields to audit logs for source IP visibility • Adds `client_ip` and `forwarded_for_client_ip` fields to audit log entries, recording the client's IP address and original proxy IP respectively • Improves UI accessibility in the project dashboard and project/slots views Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24011-2024-01-18 https://aqtiveguard.sandboxaq.com/docs/changelog/#24011-2024-01-18 Thu, 18 Jan 2024 00:00:00 GMT AQtive Guard 24.01.1 adds server-side docs, GraphQL severities filter, and .sst detection. • Ships General AQtive Guard documentation with the software at http://hostname/docs • Adds the `severities` filter to the `Organization.vulnerabilities` GraphQL field • Enables the host-scanner to detect .sst files (Serialized Certificate Store files) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#24010-2024-01-11 https://aqtiveguard.sandboxaq.com/docs/changelog/#24010-2024-01-11 Thu, 11 Jan 2024 00:00:00 GMT Adds Project-level Jira configuration via GraphQL API • GraphQL endpoint now supports configuring Jira at the Project level. • The `cipherSuite` filter in Handshakes shows only selected ciphersuites. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23120-2023-12-12 https://aqtiveguard.sandboxaq.com/docs/changelog/#23120-2023-12-12 Tue, 12 Dec 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.12.0 adds JiraIntegration GraphQL model and mutations for Tanium integration logging improvements. • Adds `JiraIntegration` GraphQL model to `Organization.integrations` • Adds several mutations to manage the updated JIRA integration • Improves logging context for the Tanium integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23112-2023-11-30 https://aqtiveguard.sandboxaq.com/docs/changelog/#23112-2023-11-30 Thu, 30 Nov 2023 00:00:00 GMT Adds GraphQL query capability for 'key roles' within the operations field • `operations` field in GraphQL now exposes `key_roles` for querying. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23111-2023-11-22 https://aqtiveguard.sandboxaq.com/docs/changelog/#23111-2023-11-22 Wed, 22 Nov 2023 00:00:00 GMT Adds `RuleObjectType` type and `mainObjectTypes` field to AQtive Guard GraphQL API • Adds the new GraphQL type `RuleObjectType` to expose rule object metadata • Adds the `mainObjectTypes` field to the `Rule` object in the GraphQL schema Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23110-2023-11-15 https://aqtiveguard.sandboxaq.com/docs/changelog/#23110-2023-11-15 Wed, 15 Nov 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.11.0 adds saved organization dashboard filters and improved issue severity readability. • `saved filters` to the Organization Dashboard Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#230910-2023-11-08 https://aqtiveguard.sandboxaq.com/docs/changelog/#230910-2023-11-08 Wed, 08 Nov 2023 00:00:00 GMT Adds AWS Secret Manager support, OIDC multi-group roles, and refined cert display • Adds `AWS_SECRET_MANAGER` integration for certificate-based rules to fetch secrets • Allows `OIDC_ROLE_CLAIM_NAME` to map to a list of groups instead of a single group in OpenID Connect configuration • Displays only the relevant certificate in rule instances to reduce noise Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23099-2023-10-20 https://aqtiveguard.sandboxaq.com/docs/changelog/#23099-2023-10-20 Fri, 20 Oct 2023 00:00:00 GMT Adds saved filters to org dashboard; adds RQ_NUM_WORKERS/RQ_NUM_WORKERS_ANALYSIS config keys for on-prem vertical scaling • Adds saved filters to the organization dashboard UI Breaking changes: • The `Trace.size` GraphQL API field type changes from Int to BigInt, requiring clients to handle larger integer values. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23097-2023-10-11 https://aqtiveguard.sandboxaq.com/docs/changelog/#23097-2023-10-11 Wed, 11 Oct 2023 00:00:00 GMT AQtive Guard 23.09.7 adds Jira integration and fixes large trace uploads. • Adds Jira issue export to automatically create issues in Jira via the AQtive Guard Web Interface • Adds Jira form integration to launch an editable form for submitting individual instances as Jira issues • Changes `CreateTraceInput.size` GraphQL input field type from Int to BigInt Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23095-2023-09-29 https://aqtiveguard.sandboxaq.com/docs/changelog/#23095-2023-09-29 Fri, 29 Sep 2023 00:00:00 GMT Adds S3 connectivity verification via `STORAGE_EXTENDED_HEALTH_CHECK` environment variable • Introduces `STORAGE_EXTENDED_HEALTH_CHECK` configuration variable to enable new S3 connectivity and rights verification by uploading/downloading small data amounts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23094-2023-09-28 https://aqtiveguard.sandboxaq.com/docs/changelog/#23094-2023-09-28 Thu, 28 Sep 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.09.4 adds Network Analyzer Handshakes tab, audit log file/config options, per-project Tanium settings, tag-based auth, and Jira integration. • Adds `Handshakes & Ciphersuites` tab to Network Analyzer reports with ciphersuite filtering • Allows configuring audit logging to file, rotating file, separate log level, and structured API via revamped backend • Enables per-project Tanium integration configuration instead of organization-level only • Introduces tag-based authorization for assigning roles based on OpenID Connect token claims • Adds Jira form integration and issue collector setup for company-managed projects Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23092-2023-09-19 https://aqtiveguard.sandboxaq.com/docs/changelog/#23092-2023-09-19 Tue, 19 Sep 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.09.2 adds filtering/sorting to HandshakesFilter API and improves GraphQL count performance • Adds `filters: HandshakesFilter` and `sorters: [HandshakesSorter]` parameters to the `ReportDone.handshakes` GraphQL query • Adds `Rule.filterStatus` field to the GraphQL schema for filtering logic • Improves performance of GraphQL queries that only retrieve the `totalCount` field Breaking changes: • The `ReportDone.handshakes` query now requires the new parameters and no longer accepts the previous signature without them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23091-2023-09-07 https://aqtiveguard.sandboxaq.com/docs/changelog/#23091-2023-09-07 Thu, 07 Sep 2023 00:00:00 GMT New UI available for on-premises deployments (disabled by default). • UI The new UI is now available in the on-premises packages but disabled by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23090-2023-09-01 https://aqtiveguard.sandboxaq.com/docs/changelog/#23090-2023-09-01 Fri, 01 Sep 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.09.0 adds Tanium Computer Group scoping to projects and legacy UI locations box • `Tanium` `Computer Group` setting is now configurable at the project level (formerly at the organization level). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard https://aqtiveguard.sandboxaq.com/docs/changelog/#23082-2023-08-28 https://aqtiveguard.sandboxaq.com/docs/changelog/#23082-2023-08-28 Mon, 28 Aug 2023 00:00:00 GMT SandboxAQ AQtive Guard 23.08.2 adds UI trace naming, printable inventory charts, and GraphQL schema updates. • `CreateTraceInput.name` and `CreateTraceInput.fileName` allow specifying trace names via API • `InstancesFilterFields.number` enum enables filtering by instance number in GraphQL queries • Certificate fields (`extensions`, `signature`, `version`) available in GraphQL schema • Printable report export now includes inventory summary chart bars Breaking changes: • `Location.fileType` type changed from String to Filetype • `CreateTraceInput.name` type changed from String! to String Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sandboxaq-aqtive-guard