2370
Version Information
Content update release notes for current versions of the Cortex XDR agent.
Content version: 2370-39889
Malware Protection (4)
Behavioral Threat Protection (agents 6.1 and above)
CTNG‑16725
MacOS Linux
Modified
Additional Behavioral Threat Protection rules related to the ChainDrop supply chain attack were added for Linux and macOS.
XDR Collection
CTNG‑16730 XSUP‑74349 XSUP‑74386
Windows MacOS Linux
Modified
The XDR Collection version was updated for compatibility reasons.
Version Information
Content update release notes for current versions of the Cortex XDR agent.
Content version: 2370-39734
Malware Protection (24)
Module Name
Issue ID
OS
Action
Description
Behavioral Threat Protection (agents 6.1 and above)
CTNG‑16699
CTNG‑16629
CTNG‑16593
CTNG‑16586
CTNG‑16585
CTNG‑16551
CTNG‑16520
CTNG‑16483
CTNG‑16421
CTNG‑14764
CTNG‑14122
Windows
MacOS
Linux
Modified
Behavioral Threat Protection rules (prevention and silent) were updated both for compatibility reasons and to increase security coverage
EDR detection module
CTNG‑16614
CTNG‑16593
CTNG‑16563
CTNG‑16551
CTNG‑16544
CTNG‑16520
CTNG‑16506
CTNG‑16421
CTNG‑16151
CTNG‑15968
CTNG‑15948
Windows
MacOS
Linux
Modified
EDR detection module rules were updated for compatibility reasons
Enhanced vulnerability assessment detection module
-
Windows
MacOS
Modified
Enhanced vulnerability assessment detection module database was updated for compatibility reasons
Local Analysis Protection module
CTNG‑16691
CTNG‑16679
CTNG‑16676
CTNG‑16671
Windows
MacOS
Linux
Modified
Local Analysis Protection Module allow list was updated for compatibility reasons
Network Packet Inspection Engine
CTNG‑16615
Windows
Modified
Network Packet Inspection Engine rules were updated for compatibility reasons
Trusted Signers
CTNG‑16661
MacOS
Modified
MacOS Trusted Signers list was updated for compatibility reasons
Exploit Protection (2)
Module Name
Issue ID
OS
Action
Description
JAVA Protection module
CTNG‑16609
CTNG‑16275
Windows
Modified
JAVA Protection module rules were updated for compatibility reasons
Last updated
Was this helpful?