1. Orchestra Group
  2. HARMONY PURPLE
  3. Release Notes

Harmony Purple Release Notes Version 3.1

Amir Gur Arie
Updated

Harmony Purple Release Notes Version 3.1

 

Release Version: 3.1 Release Date: June 2021

Copyright

Copyright ©2021 by Orchestra Group Ltd. All Rights Reserved. The “original instructions” of this manual are published in the English language. The information conveyed in this document has been carefully checked and is believed to be reliable at the time of printing. However, Orchestra Group Ltd makes no warranty regarding the information set forth in this document and assumes no responsibility for any errors or inaccuracies contained herein. Orchestra Group Ltd is not obligated to update or correct any information contained in this document. Orchestra Group Ltd reserves the right to change products or specifications at any time without notice. No part of this document may be reproduced in any form for any purpose without the prior written permission of Orchestra Group Ltd. The Orchestra Group Ltd logo and all Orchestra Group Ltd product and service names listed herein are either registered trademarks or trademarks of Orchestra Group Ltd or its subsidiaries. All other marks are the property of their respective owners. Mention of third-party products or services is for informational purposes only and does not constitute an endorsement or recommendation.

New Features and Changes
Support of Linux Applications
Harmony Purple now supports the following Linux applications. This support includes scanning for vulnerabilities and recommending remediations.
  • 7-Zip
  • Adobe Acrobat Reader
  • Adobe Flash Player
  • Firefox
  • Foxit Reader
  • Google Chrome
  • Gzip
  • LibreOffice
  • PowerShell
  • Thunderbird
  • VLC Media Player
Social Vulnerabilities
Research has shown that the most vulnerable point in most information systems is the human user or operator. Social engineering is an increasing security concern. Social engineering happens because of the human instinct of trust. Cybercriminals have learned that a carefully worded email can convince people to type their credentials into an untrusted website, provide confidential information, open untrusted files sent as attachments, or download a file that installs malware on the company network. Harmony Purple scans device’s applications running on Windows or Linux for social vulnerabilities.
Weekly Content Updates
The weekly content updates now include social vulnerabilities updates.
Social Attack Path Scenarios (APS)
There are several changes to the Attack Path Scenarios report.
The APS Type filter has Local, Social (new), and Web (previously called “Global”).
Select the Social Attack Path Scenario’s name to view its details.
The Social Attack Path Scenario displays the path from the starting point device all the way through to the critical asset.
Select Export CSV to export the Social APS to a CSV file.
Hover over any item in the APS to see its details.
Hosts by Risk Report
The Hosts by Risk report now includes a software inventory of the host. Select the Vulnerability.
Executive Summary Report Change
The Low Severity Vulnerabilities in the Scan Summary section of the Executive Summary report now may contain exploitable social vulnerabilities. Previously, Low Severity Vulnerabilities were never exploitable, but some social vulnerabilities, which according to NIST are categorized as low severity, may be exploitable.
Known Limitations
no release notes for this version
Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Articles in this section