Release Highlights

The Cortex XDR 4.2 release includes the following highlights:

FEATURE	DESCRIPTION
Advanced Email Security	Stop email attacks in real-time with an AI-driven analytics engine that assesses the intent of every email, combined with industry-leading detection and response with automated remediation.
Kernel module examination in Linux	Detect and prevent sophisticated attacks by scanning Linux kernel modules at load time, extending protection against advanced threats that attempt to hide within the operating system's core.
Enhanced driver threat prevention for Windows	Strengthen your defense against driver abuse by gaining unique visibility into user-to-kernel interactions to detect and block privilege escalation attempts at the source.
Network Packet Inspection for macOS	Enhance security and enrich EDR telemetry by detecting and preventing malicious network activity directly from macOS endpoints, providing comprehensive visibility and an additional layer of protection against threats.
Flexible control over automatic agent upgrades	Gain granular control over agent upgrades by setting automatic upgrade schedules for each endpoint profile, creating a safer, more efficient upgrade workflow that minimizes disruption while keeping your security up-to-date.
Extended Scope-Based Access Control (SBAC)	Adhere to your company’s security policies by specifying which groups of assets users can access and what actions they can perform.