New Cortex XDR 2.5 and Cortex XDR Agent 7.2 features and videos

[jdelio]

Hello everyone,

Cortex XDR and Cortex XDR Agent have just been updated with a very long list of new features.  We even have a list of videos for you to watch and see these new features in action.

I will list out all of the new features, but will not list all of the details, as the blog would be way too long if I did, so I will spare you all of the details, but will give you links to all of the release notes with all of the details. 

Below I will briefly cover what the new features are, but you will have to click on the release notes to get all of the details.

Cortex XDR 2.5 New Features

General Information

Cortex XDR Add-on Modules
Inclusive Terminology
Timezone Settings

Investigation and Response

MITRE Tags Enhancements 
Monthly Scheduled Reports
Remediate Changes from Malicious Activity
Go To Mode for Quick Launcher
Query and BIOC Enhancements for Device Information
BIOC Rule Functionality Enhancements
Quarantine File Management Improvements
New Alert Fields
Copyable Entity Data
Inline Base64 Decoding of Command Lines Arguments
Query Capacity Increase
Report Scheduling Enhancements
In-App External Dynamic List Management
Hash View Display Enhancements 
Asset View
Data Visibility and Management
Causality View Enhancements 
Analytics Alert View Enhancements 

Asset Management

Asset Management 
Analytics Management Reorganization 

Log Ingestion and Forwarding

PingOne Authentication Data Ingestion 
Affected Host Visibility in Alert Notifications

Endpoint Prevention and Management

Host Insights (Windows)
Search and Destroy Malicious Files (Windows)
Device Control of USB-Connected Devices (Mac)
Disk Encryption Using FileVault (Mac)
Host Firewall (Mac)
Network Location Resolution for Cortex XDR Agents (Mac)
Web Shell Exploits Protection (Linux)
Crypto Mining Protection (Linux)
Installed KB Visibility (Windows)
Device Control for User Defined Device Classes (Windows)
Enhanced Endpoint Scanning (Windows)
Improved Local Analysis Engine for Office Files with Macros (Windows)
Cortex XDR Agents Migration Between Managing XDR Servers (Cross-platform)
Custom Port Configuration for the Agent Proxy AppletGlobal Uninstall Agent Password Update
Scripts Interactive Mode Availability (Cross-platform)
Host Identification by Fully Qualified Domain Name (Windows)
Bandwidth Calculator for Content Updates
Post Detection Alert Response
DMG Analysis (Mac)
PDF Examination (Windows)
Advanced Analysis of Cortex XDR Agent Alerts
Endpoint Isolation Comments
Action Progress Visibility
Impacted Host Visibility in Notifications
Incident Comment Visibility

Broker Service

Network Mapper
Pathfinder Integration with the Broker VM
Broker Management Enhancements

Public APIs

New APIs
Existing API Enhancements
API Renaming

To get the full list and details, please see the release notes

Cortex XDR Agent 7.2 New Features

WINDOWS AGENT FEATURE

Host Insights
Search and Destroy Malicious Files
Installed KB Visibility
Enhanced Endpoint Scanning
Improved Local Analysis Engine for Office Files with Macros
PDF Examination
Device Control for User Defined Device Classes
Post Detection Alert Response
Host Identification by its Fully Qualified Domain Name

MAC AGENT FEATURE

Device Control of USB-Connected Devices
Disk Encryption Using FileVault
Host Firewall
Network Location Resolution
DMG Analysis

LINUX AGENT FEATURE

Web Shell Exploits Protection
Crypto Mining Protection
New Distribution Support

To get the full list and details, please see the release notes

Videos

Below is a list of the videos showing off some of these new features inside of the Cortex XDR Walkthroughs page

Please click on the ones you are interested to see the video.

• Dark Theme, Navigation and New Configuration 
• Analytics Management
• Script Block Query and BIOC 
• Remediate an Incident
• Query and BIOC for Removable Drives
• Host Inventory
• Decode BASE64 Commands
• Custom Prevention Rules 
• Asset Management
• Analysis Screen

More Info

To view all of the new Cortex XDR 2.5 features in detail, please see the Cortex XDR Release Notes page

To view all of the new Cortex XDR Agent 7.2 features in detail, please see the Cortex XDR Agent Release Notes page

More Videos

To view all of the Cortex XDR Walkthrough videos, please see the Cortex XDR Walkthroughs page

Thanks for taking time to read my blog.
If you enjoyed this, please hit the Like (thumb up) button, don't forget to subscribe to the LIVEcommunity Blog area.

As always, we welcome all comments and feedback in the comments section below.

Stay Secure,
Joe Delio
End of line