> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/release-highlights.md).

# Release Highlights

The Cortex XDR 3.13 release includes the following highlights:

| FEATURE                                        | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                        |
| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Enhanced investigation experience              | Causality Forensics Highlights are now enriched with MITRE ATT\&CK tactics, techniques, and procedures (TTPs) as well as additional data points such as URL verdicts, WildFire reports and Threat Context. This streamlines your investigations and provides immediate, actionable insights into security alerts and the related artifacts in the causality chain. |
| Integrating forensics data in causality cards  | Enriching the causality card with data from forensic collections such as OS system data, volatile and memory data, and application forensic data. This allows you to explore different layers of the investigation, simultaneously, within the same workflow.                                                                                                      |
| Protection against security bypass techniques  | Enhanced protection for Windows-based endpoints ensures your organization is safeguarded against malicious actors attempting to bypass Windows built-in security controls. This protects endpoints from the latest malicious tactics, empowering your team to focus on what truly matters without disruption.                                                      |
| Extended file type coverage for Windows        | Strengthen your defense against advanced threats by using XDR to analyze ASP and ASPX files on Windows servers. This allows you to detect and prevent malicious files from being written to your endpoints’ file system.                                                                                                                                           |
| Prisma Browser integration                     | Integrating Prisma Browser data into Cortex XDR expands the attack context to include browser activity. This allows you to query Prisma Browser data directly within Cortex and generate detection and correlation rules.                                                                                                                                          |
| Enhanced visibility and auditing for Broker VM | Cortex XDR now provides enhanced error visibility and auditing for Broker VM applets. This enables you to quickly identify and resolve application, connectivity, and processing errors, simplifying troubleshooting and ensuring your critical workflows remain uninterrupted.                                                                                    |
| Flexible compute unit (CU) consumption         | The new annual consumption plan allows you the flexibility to scale up during critical investigations or intensive periods and scale back during routine operations for predictable resource management.                                                                                                                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x-rn/cortex-xdr-release-information/features-introduced-in-2025-xdr/february-2025/release-highlights.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.