Orbital Release Notes

Orbital releases can be:

Service Release - Maintenance, upgrades, and updates to the Orbital service or console.
Node Release - Maintenance, upgrades, and updates to the Orbital node that runs on endpoints.

Orbital Service Release 1.48, 2025-06-03

Resolved the following Remote Data Store issues:
- Fixed an issue where Remote Data Stores could not be deleted under certain conditions.
- The Remote Data Store dropdown in the Schedule screen now displays the correct list of items. Previously, it displayed excessive items caused by duplicate remote data store names.
Enhanced the display of table data across the Investigate, Result details, and View single result details pages. A new toggle allows users to switch between truncated and full text views for better readability of long entries.
Organization pickers have been updated to sort organizations alphabetically. This change streamlines the selection process for users who are members of two or more Orbital organizations.

You can now configure the columns displayed in the table on the Endpoints page.
- The columns in the Endpoints table can now be reordered to your preference.
- Your column selections and order on the Endpoints page will be saved until you log out.
Added the Favorites section to the featured tile content on the Investigate page for quick access to your frequently used tools.
Updated the positioning of the Browse Catalog button on the Investigate page.
- Updated the Browse Catalog drawer now organizes content with separate Query and Script tabs at the top for improved navigation.
Updated the layout of the featured tile section on the Investigate page for improved organization.
- Updated the content within the History tile on the Investigate page.
Addressed several instances of Orbital UI crashes occurring under specific circumstances, improving application stability.

Availability via Secure Endpoint
- Orbital node version 2.32 is now available for Secure Endpoint deployments on Windows and Linux.
- Added 2 new python libraries to enable more possibilities for Orbital Scripts:
  - psutil
  - volatility

Fixed an issue where disabled organizations still appeared in the organization picker when logging into the Orbital console.
Fixed a crash of the Orbital UI that could occur under certain circumstances.

Availability via Secure Client
- For Cisco XDR users only: the Orbital Windows Node can now be deployed via Secure Client without needing to deploy Secure Endpoint first. For more information, see How Do I Get Orbital?.
- Added 2 new python libraries to enable more possibilities for Orbital Scripts:
  - psutil
  - volatility

The tables on the Results page and Endpoint Details -> Results page can now be configured to display the columns you want and the columns in the table can be re-ordered. User selections will last until the user is logged out.

Addressed an issue where users couldn't log into the Orbital console using non-Cisco IdPs.
Fixed a crash that could occur in the Orbital console under certain conditions.
The Help button now links to the appropriate section of the Help documentation based on the current page.
Query results table now has automatically-sized columns based on the average width of content in the table.
Removed the Show disabled users toggle and removed the Disabled column from the Administration -> Users table.

Improvements to various tables throughout the Orbital UI, including:
- Added enhanced search, sort, and pagination to the Remote Data Store table.
- The Query and Script result table columns can be resized.
Enhancements to the Investigate page builder, including:
- The Script code window now has auto-complete, automatic closing of parentheses, and find and replace functionality.
- The builder width can be resized up to 70 percent of the screen width.
- Added a Copy button above the code blocks for catalog items.
Added a date/time picker to the custom time range filter on the Result Details page with notifications that can assist in choosing a valid range that may produce results.
Added automatically calculated time ranges to the time range drop down above the Results table on the Result Details page.
Updated the Edit Organization Query and Script dialogs to retain edited values when clicking away from the dialog.
The Orbital UI now properly handles Cyrillic symbols.
Non-admin users can now edit and delete the Remote Data Store items they created.

Addressed a crash on the web console that could occur when viewing the results details page under certain conditions.
Improved usability of the results table on the Endpoint details page:
- Added the ability to search by query/script name.
- Added the ability to sort by "Name" and "Created" columns.
- Enhanced pagination so you can jump directly to a page.
Added a 'show empty rows' toggle to the script details page so you can view errors that may have occurred while executing a script.
Increased the favourite catalog items limit from 6 to 18.