Changed Features

The Cortex XDR 3.15 release includes the following changes to existing functionality:

COMPONENT	AREA	DESCRIPTION
Issue Counts	Improved FW alert count labels	FW alert deduplication now shows up to 1,000 alert counts. To simplify visualization, larger quantities display as 1000+.
User Name Field	Expanded Character Limit for Incident User Name Field	The character limit of the Incident User Name field has been increased to accommodate longer user names and improve search functionality.
BAS tools	BAS (Breach and Attack simulation) tools	Changed product behavior, when BAS (Breach and Attack simulation) tools are identified. Currently, only the simulation itself is terminated, while the BAS tool continues to run. New Behavior: BAS tools will be treated like any other malicious process, unless the new BAS tool mode in malware profile is switched on.
Broker VM	Agent installer and content caching	When using the Broker VM for the agent installer and content caching, you must use a minimum of an 8-core processor and increase the disk requirement to 1024 GB, instead of the previous 512 GB minimum requirement.