Arc v1.3.0

The release notes for Arc version 1.3.0.

Resolved issues

A list of all the issues that have been resolved in this release.

  • Arc-314: Improved resilience for syntactically wrong Sigma rules.
  • Arc-345: The presence of the Sysmon dependency is now checked in a more accurate way.

New features

A list of new features that have been introduced in this release.

  • Arc-265: Improved USB detection of malicious devices (scripted typing, power consumption).
  • Arc-267: The Sysmon configuration is now taken and updated by the TI feed within provided by the update service.
  • Arc-295: The local UI now tells the user when the USBpcap dependency is installed but still requires a reboot.
  • Arc-297: Traffic monitoring can now be applied selectively per interfaces, also specifying a Berkeley Packet Filter (BPF) for each from the UI.
  • Arc-304: The Local UI reports better feedback upon receiving invalid values.
  • Arc-305: The Arc Local UI can now be opened and used in multiple tabs of the same browser.
  • Arc-309: The default Sysmon configuration file has been embedded into the Arc executable.
  • Arc-313: The endpoint's detected network interfaces used for traffic monitoring are now shown together with a new alias field that can be used to tag complex interface names.
  • Arc-318: Arc UUID is now randomly generated instead of being tied to the machine ID.