> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025/release-highlights.md).

# Release Highlights

The Cortex XDR 4.2 release includes the following highlights:

| FEATURE                                        | DESCRIPTION                                                                                                                                                                                                                     |
| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Advanced Email Security                        | Stop email attacks in real-time with an AI-driven analytics engine that assesses the intent of every email, combined with industry-leading detection and response with automated remediation.                                   |
| Kernel module examination in Linux             | Detect and prevent sophisticated attacks by scanning Linux kernel modules at load time, extending protection against advanced threats that attempt to hide within the operating system's core.                                  |
| Enhanced driver threat prevention for Windows  | Strengthen your defense against driver abuse by gaining unique visibility into user-to-kernel interactions to detect and block privilege escalation attempts at the source.                                                     |
| Network Packet Inspection for macOS            | Enhance security and enrich EDR telemetry by detecting and preventing malicious network activity directly from macOS endpoints, providing comprehensive visibility and an additional layer of protection against threats.       |
| Flexible control over automatic agent upgrades | Gain granular control over agent upgrades by setting automatic upgrade schedules for each endpoint profile, creating a safer, more efficient upgrade workflow that minimizes disruption while keeping your security up-to-date. |
| Extended Scope-Based Access Control (SBAC)     | Adhere to your company’s security policies by specifying which groups of assets users can access and what actions they can perform.                                                                                             |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x-rn/release-information/features-introduced-in-2025-xdr-4x/july-2025/release-highlights.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.