> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/changed-features.md).

# Changed Features

The Cortex XDR 3.8 and Cortex XDR Agent 8.2 releases include the following changes to existing functionality:

| Component                                        | Area                                            | Description                                                                                                                                                                                                                                                                                            |
| ------------------------------------------------ | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| User Space Mode for Container-Optimized OS (COS) | Container-Optimized OS on Google Cloud Platform | <p>For Google Container-Optimized OS (COS) on Google Cloud Platform, Cortex XDR agent now enforces User Space Mode. Kernel Mode on this platform is no longer supported.</p><p>See more information about configuration requirements and limitations in the Cortex XDR Agent Administration Guide.</p> |
| Total Incident widget                            | Widget library                                  | The Total Incident widget has been renamed to Open Incidents and includes new functionality. You can now group the graph data by hour, day, or week, and you can choose to display data about incidents or alerts.                                                                                     |
| Incident Management Dashboard and Report         | Dashboards and Reports                          | The Incident Management Dashboard and Report templates have been updated to include the new Open Incidents and Open Incidents by Assignee Over Time widgets.                                                                                                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/changed-features.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.