> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/release-highlights.md).

# Release Highlights

The Cortex XDR 3.13 release includes the following highlights:

| FEATURE                                        | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                        |
| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Enhanced investigation experience              | Causality Forensics Highlights are now enriched with MITRE ATT\&CK tactics, techniques, and procedures (TTPs) as well as additional data points such as URL verdicts, WildFire reports and Threat Context. This streamlines your investigations and provides immediate, actionable insights into security alerts and the related artifacts in the causality chain. |
| Integrating forensics data in causality cards  | Enriching the causality card with data from forensic collections such as OS system data, volatile and memory data, and application forensic data. This allows you to explore different layers of the investigation, simultaneously, within the same workflow.                                                                                                      |
| Protection against security bypass techniques  | Enhanced protection for Windows-based endpoints ensures your organization is safeguarded against malicious actors attempting to bypass Windows built-in security controls. This protects endpoints from the latest malicious tactics, empowering your team to focus on what truly matters without disruption.                                                      |
| Extended file type coverage for Windows        | Strengthen your defense against advanced threats by using XDR to analyze ASP and ASPX files on Windows servers. This allows you to detect and prevent malicious files from being written to your endpoints’ file system.                                                                                                                                           |
| Prisma Browser integration                     | Integrating Prisma Browser data into Cortex XDR expands the attack context to include browser activity. This allows you to query Prisma Browser data directly within Cortex and generate detection and correlation rules.                                                                                                                                          |
| Enhanced visibility and auditing for Broker VM | Cortex XDR now provides enhanced error visibility and auditing for Broker VM applets. This enables you to quickly identify and resolve application, connectivity, and processing errors, simplifying troubleshooting and ensuring your critical workflows remain uninterrupted.                                                                                    |
| Flexible compute unit (CU) consumption         | The new annual consumption plan allows you the flexibility to scale up during critical investigations or intensive periods and scale back during routine operations for predictable resource management.                                                                                                                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/release-highlights.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.