> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/release-highlights.md).

# Release Highlights

The following are the key highlights for this release.

| FEATURE                                      | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| -------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Updated analyst experience with immersive AI | Accelerate time-to-resolution with a redesigned experience that leverages AI summarization, visualized issue relationships, and a Resolution Center to streamline your workflow. Contextual agentic assistance provides side-by-side support, guiding you through every step of an investigation directly within the unified case workspace.                                                                                                                                                                                                                                                                                                                                        |
| AgentiX Platform for XDR                     | Cortex XDR now features Cortex Agentic Assistant, a new workforce of AI agents at your command that autonomously handle workflows like triage, enrichment, and containment. Leverage prebuilt, specialized agents (Endpoint Investigation agent, Email Investigation agent, and Network Security agent) or build your own within Cortex XDR.                                                                                                                                                                                                                                                                                                                                        |
| Endpoint Data Loss Prevention (DLP)          | Protect web and endpoint activity from data leakage, even when devices are offline. Endpoint DLP delivers unified, proactive protection to stop data loss and keep critical information secure. Requires an additional license.                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Exposure Management and ASM for Cortex XDR   | Streamline risk prioritization with the new Exposure Management add-on, integrating Cortex Network Scanner, third-party vulnerabilities, advanced prioritization, and Attack Surface Management (ASM) directly into Cortex XDR. Requires additional licenses.                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Natural language querying                    | <p>Generate and run XQL queries using AI prompts, accelerating threat hunting and investigations without specialized query expertise.</p><p>Agentic Assistant agents can only create XQL queries if the tenant is in the EU or US region. Agents in all regions can run XQL queries.</p>                                                                                                                                                                                                                                                                                                                                                                                            |
| Linux & macOS protection updates             | <p>- Neutralize multi-vector threats the moment they touch your Linux systems. New on-write protection automatically scans ELF, PE, and Mach-O files, blocking malicious binaries from being stored in your environment.<br>- Identify stealthy "Command and Control" behavior by spotting unusual network connections. This new detection suite profiles network baselines for Linux and macOS to identify abnormal communication patterns.<br>- Stop attackers from harvesting system secrets and user credentials. Using enhanced behavioral analytics, Cortex XDR now highlights and blocks unauthorized attempts to access sensitive files or execute brute-force attacks.</p> |
| New platform design experience               | Move through the platform with greater ease and clarity. A refreshed, modern interface introduces a unified design language, delivering a smoother and more intuitive experience across the platform.                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x-rn/release-information/features-introduced-in-2026-xdr-5x/february-2026/release-highlights.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.