Release Highlights

The Cortex XDR 3.11 and Cortex XDR Agent 8.5 release includes the following highlights:

FEATURE	DESCRIPTION
Shellcode AI Protection Module	Shellcode AI Protection Module: New Precision AI™ machine learning rules are being rolled out to prevent in-memory shellcode attacks in Windows.
Dynamic Kernel Protection Module	New protection module implemented at the kernel level, which loads during the boot process to protect against kernel-level threats like bootkits, rootkits, and susceptible drivers.
Crypto Wallet BTP Support	An update to the behavioral threat protection (BTP) rules in the Financial Malware protection module now prevents attackers trying to steal or manipulate cryptocurrency wallets stored on Windows and MacOS hosts.
Revamped Causality Chain Interface	To enable faster and more intuitive investigations, the alert Causality Chain interface has been revamped. It now provides easier access to key information about each stage of the causality chain, improving analyst workflows.
Enterprise Multi-Tenant & MSSP Flexible License Model (Beta)	Enterprises and MSSPs who require multiple XDR tenants now have access, through our Beta program, to their own pool of XDR licenses which they can allocate to end-customers, subsidiaries, and business units as needed, using Cortex Gateway for central management of all their tenants.