> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/release-highlights.md).
# Release Highlights
The Cortex XDR 3.8 and Agent 8.2 releases include the following highlights:
| Feature | Description |
| -------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Security modules | Cortex XDR introduces new prevention modules that provide more detection and protection coverage capabilities.
- Container-escaping protection (Linux): Prevention against malicious attempts at escaping a container to gain access to the Linux host or to other container.
- Ransomware Protection (macOS): Enhancement of the defense module to improve the protection against ransomware attacks on macOS endpoints.
|
| Dynamic dashboards
(Requires a Cortex XDR Pro license)
| Cortex XDR provides new capabilities for refining the scope of data on a dashboard. You can easily adapt dashboard data to fit a specific investigation, and filter data across all dashboard widgets. These capabilities include:
- Defining fixed dashboard filters based on static or dynamic inputs. Dashboard users can select single or multiple values by which to filter the data. These filters affect all of the dashboard widgets that use the configured parameter in their query.
- Defining in-dashboard drilldowns that trigger contextual changes on the dashboard.
- Defining drilldowns that map parameters to target dashboards.
|
| Flexible hot storage retention license | To help accommodate varying storage requirements for different retention periods and datasets, Cortex XDR now includes a new additional Hot Storage license. This license enables you to set the amount of flexible Hot Storage based retention designated for a dataset and the priority for the dataset’s Hot Storage. You can purchase this storage-based license instead of our current period-based retention licenses, which is managed from the **Dataset Management** page. Read more in [License Retention](https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/License-Retention) and [Dataset Management](https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Dataset-Management). |
| New cloud security agent (Beta) | To ease the protection and visibility efforts in your cloud environment, customers using both Cortex and Prisma Cloud Compute solutions can use a single agent providing end to end prevention and vulnerability coverage on Linux cloud platforms.
Reach out to your Palo Alto Networks representative to activate the full beta capabilities.
|
| New Broker VM image | Cortex XDR now includes a new Broker VM image with enhanced capabilities, as well as an updated operating system (Ubuntu 20.04).
Going forward, upgrading Broker VMs to a new version will only be supported by brokers installed with this new image.
Instructions for migrating your brokers to the new image are explained here.
|
| New XQL incidents and alerts datasets
(Requires a Cortex XDR Pro license)
| To help you query data related to the Incidents and Alerts tables, Cortex XDR now includes new datasets called incidents and alerts. |
| MBR Protection Module | Cortex XDR introduces an improved detection engine on the Cortex XDR agent to enhance its protection against malicious Master Boot Record (MBR) manipulations. |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2023-xdr/october-2023/release-highlights.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.