Orbital Release Notes

Orbital releases can be:

Service Release - Maintenance, upgrades, and updates to the Orbital service or console.
Node Release - Maintenance, upgrades, and updates to the Orbital node that runs on endpoints.

Orbital Service Release 1.49, 2025-06-17

Catalog page updates - Enhanced Catalog Filtering Experience:
- Integrated Catalog Search Input: Updated the Filters drawer on the Catalog page to include the Search Catalog input field directly within it. This change provides a more unified and intuitive filtering experience.
- Enhanced Catalog Search and Filtering: Introduced an Applied filters component to the Catalog page. This new section dynamically appears as you search or apply filters, displaying a clear summary of your active criteria, including search terms and selected filter categories like Operating System or Type. For more details, see Catalog.
- View on Results page button Visibility: The View on Results page button in the Investigate page's Query/Script results summary section will no longer appear when all query or script results are already displayed directly on the Investigate page. This change streamlines the interface by removing redundant navigation. You can now access detailed results and related actions directly from the enhanced History section, which provides the same comprehensive view by clicking the View button.
- Updated Full Results Navigation: The View full result button on the Investigate page is now replaced by an info notification. This notification provides a direct link to view the complete response on the Results page.
Investigate page updates:
- Improved Workspace with Collapsible Featured Section: Added an expand/collapse button to the featured section, which contains the History, Favorites, and Explore tabs. Collapsing this section provides more space for the Query/Script Builder, enhancing your working area. For more information about the Investigate page, see Investigate.
- Persistent Results Section: The Results section is now positioned at the bottom of the Investigate page. Previously, the featured section would disappear to accommodate results on the right side of the screen.
- Collapsible List of Endpoints in the Results Area: Added an expand/collapse button to the Results area (which lists the endpoints). Collapsing this area provides more viewing space for the result tables, allowing you to focus on the data when analyzing query outcomes.
- Improved Script Results Table Column Widths: Improved the default column widths in the Script results table. Columns now dynamically adjust to better fit the width of the content displayed, reducing text truncation and enhancing readability.
- Removed the expand/collapse option from the Query/Script Builder on the Investigate page.
Endpoint page update:
- Secure Client UID (CMID) Display in Search Results: The Secure Client UID (CMID) will now be correctly displayed in the Endpoints table when present in search results. Previosuly, this identifier not consistently visible, ensuring more complete and accurate information during endpoint searches.

Orbital Service Release 1.48, 2025-06-03

Resolved the following Remote Data Store issues:
- Fixed an issue where Remote Data Stores could not be deleted under certain conditions.
- The Remote Data Store dropdown in the Schedule screen now displays the correct list of items. Previously, it displayed excessive items caused by duplicate remote data store names.
Enhanced the display of table data across the Investigate, Result details, and View single result details pages. A new toggle allows users to switch between truncated and full text views for better readability of long entries.
Organization pickers have been updated to sort organizations alphabetically. This change streamlines the selection process for users who are members of two or more Orbital organizations.

Orbital Service Release 1.47, 2025-05-20

You can now configure the columns displayed in the table on the Endpoints page.
- The columns in the Endpoints table can now be reordered to your preference.
- Your column selections and order on the Endpoints page will be saved until you log out.
Added the Favorites section to the featured tile content on the Investigate page for quick access to your frequently used tools.
Updated the positioning of the Browse Catalog button on the Investigate page.
- Updated the Browse Catalog drawer now organizes content with separate Query and Script tabs at the top for improved navigation.
Updated the layout of the featured tile section on the Investigate page for improved organization.
- Updated the content within the History tile on the Investigate page.
Addressed several instances of Orbital UI crashes occurring under specific circumstances, improving application stability.

Orbital Node Release 2.32, 2025-05-20

Availability via Secure Endpoint
- Orbital node version 2.32 is now available for Secure Endpoint deployments on Windows and Linux.
- Added 2 new python libraries to enable more possibilities for Orbital Scripts:
  - psutil
  - volatility

Orbital Service Release 1.46, 2025-05-06

Fixed an issue where disabled organizations still appeared in the organization picker when logging into the Orbital console.
Fixed a crash of the Orbital UI that could occur under certain circumstances.

Orbital Node Release 2.32, 2025-05-06

Availability via Secure Client
- For Cisco XDR users only: the Orbital Windows Node can now be deployed via Secure Client without needing to deploy Secure Endpoint first. For more information, see How Do I Get Orbital?.
- Added 2 new python libraries to enable more possibilities for Orbital Scripts:
  - psutil
  - volatility

Orbital Service Release 1.45, 2025-04-22

The tables on the Results page and Endpoint Details -> Results page can now be configured to display the columns you want and the columns in the table can be re-ordered. User selections will last until the user is logged out.

Orbital Service Release 1.44, 2025-04-08

Addressed an issue where users couldn't log into the Orbital console using non-Cisco IdPs.
Fixed a crash that could occur in the Orbital console under certain conditions.
The Help button now links to the appropriate section of the Help documentation based on the current page.
Query results table now has automatically-sized columns based on the average width of content in the table.
Removed the Show disabled users toggle and removed the Disabled column from the Administration -> Users table.

Orbital Service Release 1.43, 2025-03-24

Improvements to various tables throughout the Orbital UI, including:
- Added enhanced search, sort, and pagination to the Remote Data Store table.
- The Query and Script result table columns can be resized.
Enhancements to the Investigate page builder, including:
- The Script code window now has auto-complete, automatic closing of parentheses, and find and replace functionality.
- The builder width can be resized up to 70 percent of the screen width.
- Added a Copy button above the code blocks for catalog items.
Added a date/time picker to the custom time range filter on the Result Details page with notifications that can assist in choosing a valid range that may produce results.
Added automatically calculated time ranges to the time range drop down above the Results table on the Result Details page.
Updated the Edit Organization Query and Script dialogs to retain edited values when clicking away from the dialog.
The Orbital UI now properly handles Cyrillic symbols.
Non-admin users can now edit and delete the Remote Data Store items they created.

Orbital Node Release 2.22, 2025-03-12

osquery version has been updated to 5.10.2 for all operating systems.

Orbital Service Release 1.42, 2025-02-03

Addressed a crash on the web console that could occur when viewing the results details page under certain conditions.
Improved usability of the results table on the Endpoint details page:
- Added the ability to search by query/script name.
- Added the ability to sort by "Name" and "Created" columns.
- Enhanced pagination so you can jump directly to a page.
Added a 'show empty rows' toggle to the script details page so you can view errors that may have occurred while executing a script.
Increased the favourite catalog items limit from 6 to 18.