Release Highlights

The Cortex XDR 4.1 release includes the following highlights:

FEATURE	DESCRIPTION
Full-featured automation capabilities	Embedded automation natively delivers industry-leading automation capabilities to streamline operations, accelerate triage, and boost productivity. These include pre-built and custom integrations and playbooks, automated quick actions, and case investigation war rooms.
Enhanced ML-based protection with the VBScript file examination module	Strengthened defense against advanced threats by using an ML-based protection model for the Cortex XDR Agent on Windows that can detect and prevent adversary techniques using VBscript files at the execution stage.
Granular exception handling with automated recommendations	Enhanced exception capabilities allow you to define precise exceptions for a specific scenario or leverage Cortex XDR’s automated recommendations ensuring smoother operations without compromising on security.
Enhanced ML model for detecting malicious Linux executables	Advanced high-accuracy detection of malicious Linux executables using a local analysis model that leverages big data, ML, and threat analysis across both on-premise and cloud environments.
New Graph Search in Query Builder (Beta) (Requires a Cortex XDR with Cloud license)	Drive SecOps convergence and improve threat detection and response with a new Graph Search feature embedded in the Query Builder. Graph Search provides an interactive and visually intuitive way to map out and explore the full stack of an organization’s posture and the associated risks it drives. This enables security teams, from code to cloud to SOC, to more efficiently understand attack paths, discover hidden risks, and make informed decisions in less time, leading to improved security posture and operational efficiency.