> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/september-2024.md).

# September 2024

This section describes the new features and updates of the Cortex XSOAR Cloud 8.8 release.

## Release highlights

The Cortex XSOAR 8.8 release includes the following highlights:

| Feature                                                  | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| -------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Canvas -Multilayer indicator/incident relationship graph | SOC analysts can now create and share dynamic attack diagrams or static snapshots with incident response, forensics, and threat-hunting teams. This enables them to visualize and link key security incidents and IOCs, for faster and more streamlined investigation. For more information, see [Investigate an incident using the Canvas](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Investigate-an-incident-using-the-canvas). |

## Feature enhancements

The Cortex XSOAR 8.8 release includes the following enhancements:

**General**

| Feature                      | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| The Guard Rails page         | Cortex XSOAR 8 now includes the Guard Rails page, which shows performance-related errors and warnings that can be used as a guide to detect and prevent actions that may cause a decline in performance or instability. Referring to the page ensures a reliable way to maintain a secure and stable environment. For more information, see [View service limit errors and warnings on the Guard Rails page](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/View-service-limit-errors-and-warnings-on-the-Guard-Rails-page). |
| Settings page - search field | A new search field on the Settings page provides a fast and easy search of your configuration options.                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| Audit logs                   | Audit log coverage is expanded to capture detailed records of incident edits, including the modified fields. This improvement ensures a comprehensive record of all changes, significantly enhancing the ability to trace the incident's history and evolution.                                                                                                                                                                                                                                                                                                          |

**Indicators**

| Feature                          | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Exclude enrichment of indicators | <p>Indicators can now be marked as Enrichment Excluded in Cortex XSOAR, ensuring they will not be enriched. This gives you better control over your Indicators and the ability to optimize system performance by managing the indicator enrichment process.</p><p>For each indicator of type: IP, Domain, Email, URL, and File you can select whether to enable or disable enrichment calls. This allows you to conserve system resources when dealing with known indicators. Specific feeds ("Allow list" feeds) can be set as an enrichment excluded feed through its instance parameters, which excludes all of the indicators ingested by it, from being enriched.</p><p>For more information, see <a href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Exclude-indicators-from-enrichment">Exclude indicators from enrichment</a>.</p> |

**Engines**

| Feature                                     | Description                                                      |
| ------------------------------------------- | ---------------------------------------------------------------- |
| Supported Red Hat Enterprise Linux versions | Cortex XSOAR now supports Red Hat Enterprise Linux 8.10 and 9.4. |

## Marketplace content changes

This section describes the changes in content (integrations, playbooks, and indicators) from July 2024 to September 2024.

Reusing topic #UUID-dae17fff-a13b-bfba-91ed-040c13830553


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-saas-release-notes/features-introduced-in-previous-releases/features-introduced-in-2024/september-2024.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
