2380

Version Information 2380-40133

Content update release notes for current versions of the Cortex XDR agent.

Module Name	Issue ID	OS	Action	Description
Agent Scripts	CTNG-16800	Windows	Modified	CPU optimizations were added to prevent potential spikes during content deployments.

Version Information 2380-39995

Content update release notes for current versions of the Cortex XDR agent.

Malware Protection (21)

Module Name	Issue ID	OS	Action	Description
Behavioral Threat Protection (agents 6.1 and above)	CTNG-16770 CTNG-16765 CTNG-16705 CTNG-16665 CTNG-16647 CTNG-16626 CTNG-16559 CTNG-16535 CTNG-16512 CTNG-16121 CTNG-15922 CTNG-15527	Windows MacOS Linux	Modified	Behavioral Threat Protection rules (prevention and silent) were updated both for compatibility reasons and to increase security coverage
EDR detection module	CTNG-16700 CTNG-16647 CTNG-16559 CTNG-16535 CTNG-16363 CTNG-16361 CTNG-16121 CTNG-15922 CTNG-15527	Windows MacOS Linux	Modified	EDR detection module rules were updated for compatibility reasons
Local Analysis Protection module	CTNG-16762 CTNG-16757 CTNG-16755 CTNG-16711	Windows MacOS Linux	Modified	Local Analysis Protection Module allow list was updated for compatibility reasons
Local Threat-Evaluation Engine	CTNG-16627	MacOS Linux	Modified	Local Threat-Evaluation Engine rules was updated for compatibility reasons
Network Packet Inspection Engine (DPI)	CTNG-16698	Windows	Modified	Network Packet Inspection Engine (DPI) rules were updated for compatibility reasons
Enhanced vulnerability assessment detection module	-	Windows MacOS	Modified	Enhanced vulnerability assessment detection module database was updated for compatibility reasons

Exploit Protection (4)

Module Name	Issue ID	OS	Action	Description
ROP Mitigation Protection module	CTNG-16663	Windows MacOS Linux	Modified	ROP Mitigation Protection module rules were updated for compatibility reasons
Gatekeeper Enhancement	CTNG-16665 CTNG-16636	MacOS	Modified	Gatekeeper Enhancement module rules were updated for compatibility reasons
Java Deserialization Protection module	CTNG-16765	Windows	Modified	Java Deserialization Protection module rules were updated for compatibility reasons