Anomali Lens 5.0.1:

- Improved user interface text sizing.
- Improved user interface responsiveness and performance.

Anomali Lens 5.0.0:

User Interface: The user interface has a new look and feel.

New Settings:
- Theme: You can configure Daylight or Midnight user interface themes.
- Scan form elements: You can specify whether Lens should attempt to scan mutable elements within a web page (for example, a data entry text box). This option is disabled by default.
- Anomali Match retrospective search: You can specify the time range used when identifying matches using Anomali Match retrospective search.
- Analyst Tools: You can specify whether Lens+ Analyst Tools (the buttons to create a Threat Bulletin, Investigate, or Import) are available when the scan has not identified any threat entities. By default, the Analyst Tools are not available when there are no threat entities.
- Match Cloud XDR: Support for Lens communication with Match Cloud XDR.

Anomali Lens 4.9.0:

MITRE ATT&CK information: This release supports the new MITRE ATT&CK versions that an organization can configure on ThreatStream Cloud:

- MITRE ATT&CK techniques associated with MITRE v6 and earlier are classified as TTPs in the Anomali Threat Model and are identified as TTPs in the Anomali Lens+ user interface.
- MITRE ATT&CK techniques and sub-techniques associated with MITRE v7 and later are classified as attack patterns in the Anomali Threat Model and are identified as attack patterns in the Anomali Lens+ user interface.

Anomali Lens 4.8.1:

This release contains bug fixes

Anomali Lens 4.8.0:

This release contains important performance enhancements and bug fixes.

Anomali Lens 4.7.0:

PDF Scanning: The accuracy of PDF scanning has been improved.
Page Scan Quota: The page scan quota for freemium Anomali Lens users has been increased to 100 page scans per month.

Anomali Lens 4.6.0:

Trending Entities: The flame icon, which indicates a term highlighted by Lens is trending, is now displayed next to highlighted entities on the page.

Anomali Lens 4.5.0:

Jump to Entity: After scanning a page, you can jump to highlighted entities by
clicking an entity name on the Anomali Lens user interface.

Anomali Lens 4.4.0:

- PDF Scanning: Scan PDF files for cyber threat information from the Anomali Lens plugin.

- Never Scan: ThreatStream Org Admins can create and manage an organization level Never Scan list. The list is managed from the ThreatStream user interface and prevents all Anomali Lens users within your organization from scanning the listed domains, IP addresses, or URLs.

Anomali Lens 4.3.1 includes:

Create a Threat Bulletin after scanning any page, even in cases where no cyber threat content is detected. Previously, Threat Bulletin creation was only available when Lens detected cyber threat content.

Anomali Lens v4.1.1:
- This release contains internal fixes to improve security and stability.

Anomali Lens 3.1.0 includes the following enhancements:
- Import selected observables directly from the Anomali Lens extension window.
- Configure a list of domains and IP addresses you want Lens to scan automatically.
- Collect client logs from Lens to expedite troubleshooting with Anomali Support.

Anomali Lens 3.0.3 includes a fix for an issue that intermittently caused buttons on the settings page to become unresponsive.

Anomali Lens 3.0.2 includes fixes for issues that prevented contextual tooltips launching consistently and an improved configuration screen experience.

- Context at the point of use: Mouse over highlighted entities for a quick summary.
Know if you’ve already been impacted: Integrate with Anomali Match and automatically detect whether highlighted observables have been present in your environment.
- Operationalize threat intelligence: Create machine readable threat bulletins and observables with the click of a button.
- Investigate threats with ease: Add highlighted entities to an investigation in ThreatStream for further research and pivoting.
- Leverage legacy ThreatStream plugin functionality: Select and right click any text on the screen to launch sandbox detonations, report selected entities as false positive, or perform observable or Threat Bulletin searches in ThreatStream.

Lookup functionality now performs a global search and shows results not only for Observables but also Threat Model entities. Additionally, a new option was created to see the details of the IOCs inside of ThreatStream.

Lookup functionality now performs a global search and shows results not only for Observables but also Threat Model entities. Additionally the query will now match tags.