> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/8.x/8.4-eol/cortex-xdr-agent-8.4-release-information/features-introduced-in-cortex-xdr-agent-8.4.md).

# Features Introduced in Cortex XDR Agent 8.4

The following section describes the new features introduced in Cortex XDR agent 8.4 releases according to the supported agent operating systems.

#### General Features

| Feature   | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Forensics | <p>Cortex XDR introduces a new Forensic Hunting feature to the Forensics add-on. This includes:</p><ul><li>Named collection of user-defined searches</li><li>Method for running artifact searches at scale</li><li>Support for custom search parameters across all supported artifacts</li><li>Configurable timeouts for each artifact search</li><li>Ability to schedule searches for specific days or time ranges</li><li>Replaces artifact and search collections in User Agent settings and Forensic searches in the Action Center.</li></ul> |

#### Linux Features

The following features were added to Cortex XDR agents running on Linux endpoints:

| Feature              | Description                                                                                                                                                                                                                                                                                                                                       |
| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Cloud Security Agent | <p>Unified (single) agent that reduces maintenance and resource overheads while providing runtime security and vulnerability management capabilities for cloud native environments.</p><p>Requirements:</p><ul><li>Cortex XSIAM 2.2/Cortex XDR 3.10 Cloud per Host</li><li>Prisma Cloud Compute</li><li>Cortex XDR agent 8.2.1 or above</li></ul> |
| Operating systems    | <p>Support for the following Linux Kubernetes operating system has been added in release 8.4</p><ul><li>TalOS</li></ul>                                                                                                                                                                                                                           |

#### Mac Features

The following features were added to Cortex XDR agents running on Mac endpoints:

| Feature                                  | Description                                                                                                                                        |
| ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
| Vulnerability Assessment scanning engine | Cortex XDR support has been expanded to include an improved vulnerability scanning engine for both OS-level and 3rd-party applications level CVEs. |

#### Windows Features

The following features were added to Cortex XDR agents running on Windows endpoints:

| Feature                                  | Description                                                                                                                                        |
| ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
| Vulnerability Assessment scanning engine | Cortex XDR support has been expanded to include an improved vulnerability scanning engine for both OS-level and 3rd-party applications level CVEs. |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/8.x/8.4-eol/cortex-xdr-agent-8.4-release-information/features-introduced-in-cortex-xdr-agent-8.4.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
