https://cybertoolchain.io/tools/threatmapper New releases and features in ThreatMapper, tracked by The Cyber Toolchain. en Wed, 22 Jan 2025 15:31:34 GMT https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.3 https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.3 Wed, 22 Jan 2025 15:31:34 GMT Adds /api/v1/database/info endpoint and UI support for ThreatIntel feed status and communication messages. • Adds `GET /api/v1/database/info` API endpoint to expose database health and connection details • Adds ThreatIntel feed info display in Settings screen and site banner • Adds UI support for displaying communication messages from the server Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.2 https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.2 Fri, 20 Dec 2024 18:55:25 GMT Adds custom tags to hosts/containers/pods, container scan comparison UI, inactive resource indicators, and malware reference links in ThreatMapper v2.5.2 • Adds `reference` field to Malware detail pages with a clickable link for more information. • Adds the ability to tag hosts, containers, and pods with custom user-defined tags. • Adds a 'Container scan comparison' view in the UI to compare scan results between two images or clusters. • Adds inactive resource indicators (flags and UI markers) to issue detail modals for resources that are no longer active. • Adds `image_name` filter support in the container filters dropdown. • Adds expanded state for multiple filter components by default in the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.0 https://github.com/deepfence/ThreatMapper/releases/tag/v2.5.0 Fri, 15 Nov 2024 06:38:50 GMT ThreatMapper v2.5.0 adds EPSS/CVE-KIV scoring to vuln API, zipped report downloads, and proxy support for cyber tooling • `lookup vulnerabilities api` now includes `epss_score` and `description` fields in responses. • UI adds a 'Zipped report download' option for exporting scan results. • ThreatMapper cyber tool now supports proxy server configuration for outbound connections. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.4.0 https://github.com/deepfence/ThreatMapper/releases/tag/v2.4.0 Mon, 07 Oct 2024 19:05:39 GMT Adds support for TLS Redis connections and enforces DEEPFENCE_FILE_SERVER_PORT type. • `DEEPFENCE_FILE_SERVER_PORT` must now be a string • Add support for TLS redis connection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.3.0 https://github.com/deepfence/ThreatMapper/releases/tag/v2.3.0 Tue, 30 Jul 2024 10:00:35 GMT ThreatMapper v2.3.0 adds Azure multi-subscription support, scan summary notifications, and a Go shipper • Supports scanning multiple Azure subscriptions under a single organization account via the console UI • Enables sending scan summaries with links to results via configured integrations • Replaces the fluentbit log shipper with a new golang-based shipper for agent telemetry Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.2.0 https://github.com/deepfence/ThreatMapper/releases/tag/v2.2.0 Mon, 29 Apr 2024 08:49:24 GMT ThreatMapper v2.2.0 adds threat intel rule uploads, async report merging, SendGrid email support, and new namespace filters • Adds API endpoint to upload custom threat intelligence rules • Enables asynchronous merge of scan reports • Adds `PATCH` method for the cloud account deletion API endpoint • Adds optional date range selector when generating reports in the UI • Adds support for SendGrid as an email provider in configuration • Adds namespace filter to pod and container tables in topology view • Adds option to include deepfence system assets in scans Breaking changes: • Neo4j database migration is required when upgrading because Neo4j has been updated from version 4.x to 5.x • Cloud account deletion API endpoint now requires the `PATCH` method instead of `DELETE` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.1.1 https://github.com/deepfence/ThreatMapper/releases/tag/v2.1.1 Thu, 14 Mar 2024 18:19:40 GMT Adds configurable notification channels for scan results and select-integration notification workflow. • `Select channel for sending notification of scan results` to route scan alerts via the chosen integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v2.1.0 https://github.com/deepfence/ThreatMapper/releases/tag/v2.1.0 Tue, 13 Feb 2024 16:11:01 GMT ThreatMapper v2.1.0 adds Amazon Bedrock GenAI integration, priority scans, custom scheduled jobs, and bulk registry deletion API. • Integrates with Amazon Bedrock for generative AI analysis • Adds `priority` option for scans to accelerate high-risk assessments • Supports creation of custom scheduled jobs via UI or API • Adds `asynq` CLI in the worker container for asynchronous job management • Enables manual upload of agent tarballs for air-gapped deployments • Adds API endpoint to delete multiple registry accounts at once • Configures worker concurrency via environment variable Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.5.0 https://github.com/deepfence/ThreatMapper/releases/tag/v1.5.0 Tue, 28 Mar 2023 09:57:06 GMT ThreatMapper v1.5.0 adds Kafka ingest pipeline and exposes Prometheus metrics port for external monitoring. • `expose prometheus metrics port` to enable scraping the service's operational metrics directly. • Adds `Kafka` to the data ingest pipeline, allowing events to be pushed to a Kafka topic. • Adds Kubernetes compliance report generation option via the UI. • Supports Grype v5 vulnerability database for updated container image scanning coverage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.2 https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.2 Thu, 12 Jan 2023 14:01:11 GMT ThreatMapper v1.4.2 adds AWS Security Hub integration, CRI-O support, and pentest report uploads. • Add ability to integrate with AWS Security Hub • cri-o in k8s installation instruction (CRI-O runtime support) • add pentest reports • Option to configure docker socket path Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.1 https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.1 Mon, 03 Oct 2022 17:43:46 GMT Adds Cloudtrail alerts UI and support for custom docker/containerd socket paths • `Cloudtrail alerts UI`: New UI view to display Cloudtrail alerts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.0 https://github.com/deepfence/ThreatMapper/releases/tag/v1.4.0 Wed, 10 Aug 2022 08:11:07 GMT Adds Cloud Security Posture Analysis and Threat Graph capabilities to the platform • Introduces Cloud Security Posture Analysis feature for evaluating cloud environment configurations • Adds Threat Graph visualization for mapping attack paths and relationships between assets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.3.1 https://github.com/deepfence/ThreatMapper/releases/tag/v1.3.1 Fri, 29 Jul 2022 10:43:00 GMT ThreatMapper v1.3.1 adds Harbor support, air-gapped DB uploads, secret scan exports, and new UI/reporting capabilities • `Make es index names, url scheme configurable` by @ramanan-ravi in https://github.com/deepfence/ThreatMapper/pull/378 • `Add support for ui runtime env variables` by @manV in https://github.com/deepfence/ThreatMapper/pull/410 • (feat). `API to upload vulnerability db in airgapped env` by @ibreakthecloud in https://github.com/deepfence/ThreatMapper/pull/412 • Excel and PDF report has been added for the Secret Scans' results by @mukuldeepfence in https://github.com/deepfence/ThreatMapper/pull/382 • Add `Harbor Registry` support • `Add option to update postgres configuration` and add cluster domain in Helm chart • Disable vulnerability db validity check to support air-gapped environments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.3.0 https://github.com/deepfence/ThreatMapper/releases/tag/v1.3.0 Tue, 15 Mar 2022 19:07:20 GMT ThreatMapper v1.3 adds secret scanning, SBOM export, and Anchore-based vulnerability scanning with sensor upgrade requirement • Adds Secret Scanning for containers and host filesystems to detect unprotected secrets such as access tokens, keys, and passwords. • Adds runtime SBOM (Software Bill of Materials) generation and export for running workloads and hosts. • Integrates Anchore syft for SBOM creation and Anchore grype for vulnerability scanning. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper https://github.com/deepfence/ThreatMapper/releases/tag/v1.2.0 https://github.com/deepfence/ThreatMapper/releases/tag/v1.2.0 Tue, 08 Mar 2022 09:20:49 GMT Adds Attack Path visualization, AWS Fargate sidecar support, Google Chronicle integration, and ECR ARN/tag filtering in ThreatMapper v1.2.0 • Adds `Attack Path` visualisation to identify vulnerable workloads exposed to internet traffic through proxy layers via network traffic analysis • Adds AWS Fargate workload support allowing ThreatMapper sensor agents to be deployed as sidecars alongside Fargate tasks • Adds Google Chronicle integration to automatically push events, alerts and scan results for archiving and analysis • Adds `AWS_ECR_TARGET_ACCOUNT_ROLE_ARN` support for registry scans enabling authenticated scanning of AWS ECR repositories via IAM roles • Adds tag-based artifact filtering capability to registry scans allowing users to limit scanned images by specific tags Full history on Cyber Toolchain: https://cybertoolchain.io/tools/threatmapper