Tenable Attack Surface Management 2024 Release Notes

Role-Based Access Control (RBAC) in Tenable Attack Surface Management

You can assign Tenable-provided roles to Tenable Attack Surface Management users at the time of their creation in Tenable Vulnerability Management. For more information, see Tenable Attack Surface Management Roles.

Extended Support for AWS Sources

Tenable Attack Surface Management pulls data from the following sources from AWS to your inventories.

• Amazon EC2

• Amazon Relational Database Service (RDS)

• Amazon S3

• Amazon Elastic Kubernetes Service (EKS)

• Amazon ElastiCache

• AWS Elastic Beanstalk

• Amazon Route 53

• Amazon OpenSearch / ElasticSearch

For more information, see Integrate with AWS

You can now add missing TXT records manually and extend discovery capabilities in specific cases where the record type is not found.

Earlier, Tenable Attack Surface Management allowed the deletion of the last remaining inventory in an account, but creating new inventories in that account required you to contact Tenable Support to associate at least one new inventory with the account.

To reduce the negative ramification of this action, Tenable Attack Surface Management now no longer allows the deletion of an inventory if it is the only remaining inventory.

The Automation Rules page now includes created at and updated at timestamps. Tenable Attack Surface Management now allows soft deletion of rules for better attribution capabilities.

Includes several improvements to the ASM API documentation to improve the clarity of instructions and reflect the most recent API updates.

You can now filter assets using the bd.last_metadata_change API. This new property unlocks several API use cases, such as cheaper lookups against assets by respecting only metadata updated in a pre-defined time window.

You can use the Suggestion Blocklist option to exclude domain names, email addresses, hostname, or CIDR (Classless Inter-Domain Routing) from the suggested domains list. For more information, see Suggestion Blocklist.

Tenable Attack Surface Management now logs all system events for your account and groups them based on timestamp and actor. You can view these logs from the Activity Logs page. For more information, see Activity Logs.

Custom Dashboards

You can now create custom dashboards, add new widgets, or customize the default Dashboard. For more information, see Manage Dashboards.

Automation Rules in Activity Logs

Changes to the automation rules now appear on the User Activity Logs page, where state changes to inventories are listed as system tasks.

Effective TLDs

You can now add effective top-level domains (TLD) as sources to further increase the breadth and depth of Tenable Attack Surface Management asset discovery capabilities and help bridge the blind spots in identifying external attack surface.

Tenable Attack Surface Management now includes the Robust Filtering option to filter your assets using multiple queries with AND/OR operators. Robust filtering also allows two levels of nesting. You can convert your Legacy filtering query to the Robust filtering query. For more information, see Robust Filtering.

Asset Prioritization

Tenable Attack Surface Management ranks your assets and assigns a severity level to the assets based on their security risk. You can use the severity ranking to prioritize the assets that require immediate attention. For more information, see Asset Prioritization.

Integrations

You can use the Integrations page to integrate Tenable Attack Surface Management with other applications and add assets from these sources. Tenable Attack Surface Management allows you to integrate with CloudFlare and AWS. For more information, see Integrations.

Integration with AWS

Tenable Attack Surface Management now supports integrations with AWS to add assets from your AWS accounts. For more information, see Integrate with AWS.