Hello everyone,
Cortex XDR and Cortex XDR Agent have just been updated with a very long list of new features. We even have a list of videos for you to watch and see these new features in action.
I will list out all of the new features, but will not list all of the details, as the blog would be way too long if I did, so I will spare you all of the details, but will give you links to all of the release notes with all of the details.
Below I will briefly cover what the new features are, but you will have to click on the release notes to get all of the details.
Cortex XDR 2.5 New Features
General Information
Cortex XDR Add-on Modules
Inclusive Terminology
Timezone Settings
Investigation and Response
MITRE Tags Enhancements
Monthly Scheduled Reports
Remediate Changes from Malicious Activity
Go To Mode for Quick Launcher
Query and BIOC Enhancements for Device Information
BIOC Rule Functionality Enhancements
Quarantine File Management Improvements
New Alert Fields
Copyable Entity Data
Inline Base64 Decoding of Command Lines Arguments
Query Capacity Increase
Report Scheduling Enhancements
In-App External Dynamic List Management
Hash View Display Enhancements
Asset View
Data Visibility and Management
Causality View Enhancements
Analytics Alert View Enhancements
Asset Management
Asset Management
Analytics Management Reorganization
Log Ingestion and Forwarding
PingOne Authentication Data Ingestion
Affected Host Visibility in Alert Notifications
Endpoint Prevention and Management
Host Insights (Windows)
Search and Destroy Malicious Files (Windows)
Device Control of USB-Connected Devices (Mac)
Disk Encryption Using FileVault (Mac)
Host Firewall (Mac)
Network Location Resolution for Cortex XDR Agents (Mac)
Web Shell Exploits Protection (Linux)
Crypto Mining Protection (Linux)
Installed KB Visibility (Windows)
Device Control for User Defined Device Classes (Windows)
Enhanced Endpoint Scanning (Windows)
Improved Local Analysis Engine for Office Files with Macros (Windows)
Cortex XDR Agents Migration Between Managing XDR Servers (Cross-platform)
Custom Port Configuration for the Agent Proxy AppletGlobal Uninstall Agent Password Update
Scripts Interactive Mode Availability (Cross-platform)
Host Identification by Fully Qualified Domain Name (Windows)
Bandwidth Calculator for Content Updates
Post Detection Alert Response
DMG Analysis (Mac)
PDF Examination (Windows)
Advanced Analysis of Cortex XDR Agent Alerts
Endpoint Isolation Comments
Action Progress Visibility
Impacted Host Visibility in Notifications
Incident Comment Visibility
Broker Service
Network Mapper
Pathfinder Integration with the Broker VM
Broker Management Enhancements
Public APIs
New APIs
Existing API Enhancements
API Renaming
To get the full list and details, please see the release notes
Cortex XDR Agent 7.2 New Features
WINDOWS AGENT FEATURE
Host Insights
Search and Destroy Malicious Files
Installed KB Visibility
Enhanced Endpoint Scanning
Improved Local Analysis Engine for Office Files with Macros
PDF Examination
Device Control for User Defined Device Classes
Post Detection Alert Response
Host Identification by its Fully Qualified Domain Name
MAC AGENT FEATURE
Device Control of USB-Connected Devices
Disk Encryption Using FileVault
Host Firewall
Network Location Resolution
DMG Analysis
LINUX AGENT FEATURE
Web Shell Exploits Protection
Crypto Mining Protection
New Distribution Support
To get the full list and details, please see the release notes
Videos
Below is a list of the videos showing off some of these new features inside of the Cortex XDR Walkthroughs page
Please click on the ones you are interested to see the video.
More Info
To view all of the new Cortex XDR 2.5 features in detail, please see the Cortex XDR Release Notes page
To view all of the new Cortex XDR Agent 7.2 features in detail, please see the Cortex XDR Agent Release Notes page
More Videos
To view all of the Cortex XDR Walkthrough videos, please see the Cortex XDR Walkthroughs page
Thanks for taking time to read my blog.
If you enjoyed this, please hit the Like (thumb up) button, don't forget to subscribe to the LIVEcommunity Blog area.
As always, we welcome all comments and feedback in the comments section below.
Stay Secure,
Joe Delio
End of line
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
| Subject | Likes |
|---|---|
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like |
