1930

Version Information

Content update release notes for current versions of the Cortex XDR agent.

Content version: 1930-22028

Exploit Protection (3)

Module Name	Issue ID	OS	Action	Description
Dylib Hijacking Protection	CTNG-13248 CTNG-13272	MacOS	Modified	Dylib Hijacking Protection module rules were updated for compatibility reasons
Java Deserialization Protection module	CTNG-13244	Linux	Modified	Java Deserialization Protection module rules were updated for compatibility reasons

Malware Protection (21)

Module Name	Issue ID	OS	Action	Description
Behavioral Threat Protection (agents 6.1 and above)	CTNG-13335 CTNG-13229 CTNG-13094	Windows MacOS Linux	Modified	Behavioral Threat Protection rules (prevention and silent) were updated both for compatibility reasons and to increase security coverage
EDR detection module	CTNG-13284 CTNG-13221 CTNG-13094 CTNG-12907 CTNG-12895 CTNG-12777 CTNG-13272	Windows MacOS Linux	Modified	EDR detection module rules were updated for compatibility reasons
Local Analysis Protection module	CTNG-13326 CTNG-13317 CTNG-13316 CTNG-13314 CTNG-13294 CTNG-13289 CTNG-13181	Windows MacOS Linux	Modified	Local Analysis Protection Module allow list was updated for compatibility reasons
Enhanced vulnerability assessment detection module	-	Windows MacOS	Modified	Enhanced vulnerability assessment detection module database was updated for compatibility reasons
Local Threat-Evaluation Engine	CTNG-13284 CTNG-12907	MacOS Linux	Modified	Local Threat-Evaluation Engine rules was updated for compatibility reasons
Gatekeeper enhancement	CTNG-13255	MacOS	Modified	Gatekeeper enhancement module rules were updated for compatibility reason
Child Process Protection	CTNG-13168	Windows›fi	Modified	Child Process Protection Module was updated for compatibility reasons
Kernel modules compatibility support	CTNG-13218 CTNG-13217 CTNG-13216	Linux	Modified	Kernel modules compatibility support list was updated