Improved Context for Locked Sessions in the Alerts Report
The BEHAVIOR > Alerts report now provides clearer context for rule violations that occur during a locked session. Alerts triggered while a user's device is locked will now be marked with a “(Locked Session)” label.
This enhancement provides analysts with immediate context, enabling faster triage, more accurate risk assessment, and clearer explanations during reviews and audits. It also helps distinguish genuine user activity from background or system processes, improving the signal-to-noise ratio in alert investigations.
Streamlined OCR Search: Removal of Legacy “Fulltext” Option
The legacy Fulltext search option has been removed from the Monitoring > OCR report. This change streamlines the search experience, prevents redundancy with other search capabilities, and ensures consistency with Teramind NextGen.
Why the Change? The "Fulltext" option often duplicated other search functions, could be inconsistent, and added complexity without significant value.
Alternative: You can continue to perform all necessary searches using the more predictable and flexible Contains and Regexp search modes already available in the OCR report.