Feature Ideas
Submit IdeaSetting to Force 2FA for all accounts
Please provide a setting on all ASGARD family servers to force users to use/register 2FA
Michael Sepp // BETTA Security G1
Another default asgard playbook - print file content
i keep adding "type $file$" and "cat $file$" playbooks to view the content of txt, ps1, bat and other text files without download. It saves a few clicks compared to the Collect file playbook, speeds up the analysis and reduces the number of LA cases in the security center. Would be nice to have such playbook(s) as part of the default set.
Albina // BETTA Security G1
ASGARD Agent Installer as .MSI File
To make deployment easier we are seeing more request from customers for a .msi based ASGENT installer rather .exe based installer. Would be nice to have that option.
Michael Sepp // BETTA Security G2
Modern authentication
If you could implement modern authentication methods like SAML or MFA. That would be great.
Philipp W1
Remote Console Window cannot be resized since ASGARD 2.11.11
Since version 2.11.11 the buttons to resize the size of the remote console cannot be extended by adding additional rows or columns. This leads to a very tiny view port to work in. Please add the " Add row" and Add columns" button back to the UI.
Michael Sepp // BETTA Security G0
Add "AND NOT" or "AND" Label aggregation options for THOR Group Scans
Add "AND NOT" or "AND" Label aggregation options for THOR Group Scans via ASGARD instead of the implicit "OR" that is automatically applied. AND This would ease up label management by a large factor because one could control scans without the need for having tons of labels. Example if you would like to scan the Windows ("WIN") 2016 ("SRV_2016") servers in France ("COUNTRY_FR") you would need to crate an additional label like "COUNTRY_FR_WIN_SERVER_2016". Using existing label would not work because using the existing labels WIN, SRV2016, COUNTRY_FR would lead to a scan of all asset that have label "COUNTRY_FR" and all assets that have label "SRV_2016" and all assets that have label "WIN" applied. AND NOT Also it would be helpful to use labels in a scan like "SERVER" AND "WIN" AND NOT "CAR_FACTORY_CONTROL" to exclude groups of asset with certain labels quickly from a scan.
Michael Sepp // BETTA Security G0
Different Themes in ASGARD, e.g. "Light", "High Contrast"
The idea is to add different CSS themes in ASGARD Management Center apart from the default dark theme, e.g. "Light", "High Contrast"
Florian Roth2
Ability to create accounts using API for both MC and AC
Zachi N0
LDAP improvements (2FA, User whitelisting)
We would like to be able to use 2FA for LDAP users. The setup of 2FA should also be enforceable. Furthermore, it would be useful if we could activate individual LDAP users at the Management Centre instead of always going via the group. This way, we could also assign individual rights and use LDAP only as password management.
Philipp K0
ASGARD Query in Service Control
Hello, it would be nice, if the ASGARD Query search (e.g. "is_domain_controller is true") would be available in service control - to assign specific configurations. kind regards Philipp
Philipp W0
SIGMA Ruleset Automatic Rules
Hello, when creating a ruleset you can select the option to add automatically rules with a specific level (critical, high, etc.) With rule updates, these levels change sometimes. Maybe the automatic removel would be a great addition to this feature. kind regards Philipp
Philipp W0
Change group scan settings during "copy failed assets"
Add option to change group scan settings during "copy failed assets" as the wrong settings might be the root cause for the failure. Therefore, it would be beneficial if one could change settings during the duplication process of failed assets/scans
Michael Sepp // BETTA Security G0
Edit Templates // Duplicate Templates and change settings
It would be helpful if one could change/edit templates or duplicate templates and during that process change settings
Michael Sepp // BETTA Security G1
Converting filenames IoCs
IoCs (not via MISP) get delivered as "pure" filenames like software.exe If this gets imported to ASGARD, this will match thisismysoftware.exe as well. During the import, it would be great to have an option to convert all lines to \software.exe
Philipp W0
AD Authentication with nested groups
Nested groups don't work for AD authentication. We use this A LOT.
Philipp W4