Skip to main content

Software Releases

Endpoint Agent

_General

...

4.4.0.9

FeaturesFor telementry-enabled groups, added Active Directory data to credential theft watch list...

4.4.0.9.1

FeaturesNone - maintenance update.FixesFixed some network shares connected by a user being initia...

4.4.1.0

FeaturesExpanded support for processes injection analytics, to dramatically increase the accuracy...

4.4.1.1

FeaturesImproved analytical processing for parent-child relationships, when the parent process qu...

4.4.1.2

FeaturesIncreased available specificity for whitelists, such as parent process path and arguments...

4.4.1.3

FeaturesCredential/Identity Monitoring now includes various VPN, cryptocurrency wallet, and other...

4.4.1.4

FeaturesUpgraded pattern matching capabilities in the behavioral model.This is especially relevan...

4.4.2.0

FeaturesUpgraded monitoring and prevention capabilities for automated identity access protection....

4.4.2.1

FixesOptimized identity information tracking for applications with large number of deeply nested ...

4.4.2.2

FeaturesNoneFixesOptimization of variable handling for one genre of behavior.Cause: One unspecif...

4.4.2.3

FeaturesNoneFixesFixed Acronis compatibility issuesMD5 Hashesservice.exe = 4747ae6372a0f3a410c1...

4.4.2.4

FeaturesCredential protection support for Microsoft Teams and Signal MessengerFixesSuppressed net...

4.4.2.5

FeaturesNoneFixesReduced network usage when sending large amounts of reports at onceFix handling ...

4.4.2.6

FeaturesNoneFixesReduced memory usage in servers with many unique program certificatesMD5 Hashess...

4.4.2.7

FeaturesNoneFixesReduced memory usage during handling of programs that use undefined behavior in ...

4.4.2.8

FeaturesNoneFixesIncreased logging and telemetry for bad machine statesStability increase for Ide...

4.4.3.0

FeaturesIn addition to existing service protections, the kernel mode driver will restart the serv...

4.4.3.2

FeaturesNoneFixesReduced CPU usage during process starts.Reduced CPU usage in trust determination...

4.4.3.1

FeaturesNoneFixesFixed some machines with unusual Windows installation characteristics having vis...

4.4.4.0

FeaturesReports for incidents and telemetry are stored on disk for offline scenarios.Due to tampe...

4.4.4.4

FeaturesNoneFixesImproved performance for parsing certificate data on system startup.MD5 Hashesse...

4.4.5.1

FeaturesReduced bandwidth usage:Use compression for larger telemetry data and larger server respo...

4.4.5.2

FeaturesNew kernel level access telemetry for network-based behaviors, to better identify possibl...

4.4.5.3

FeaturesAdded a second domain for server communication (see domain list here).If there are commun...

4.4.5.9

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.5.8

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.5.5

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.5.6

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.5.7

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.5.4

FeaturesIncreased hardening of portions of functionality previously conducted by the Windows cryp...

4.4.6.0

FeaturesCPU performance enhancement for some applications which burst large numbers of automated ...

4.4.6.1

FeaturesFurther migration from the “Ransomware Rewind” product name to “Cyber Crucible”.Legacy se...

4.4.6.2

FeaturesAdded optional “access type” flags exposed to end users for behavioral access specificity...

4.4.6.3

FeaturesAdded optional SOCKS5 proxy support to assist agent deployment.FixesFixed reinstallations...

4.4.6.4

FeaturesParent process memory information is available for process reports when modifications wer...

4.4.7.0

FeaturesBeginning rollout of JWE-based HTTPS communications.Encryption keys are unique to every a...

4.4.7.1

FeaturesMore telemetry for process creations and incidentsUser SIDUser down-level logon nameWheth...

4.4.7.3

FeaturesDMZ ModeOptional configuration to use a signed CA bundle for TLS communication with authe...

4.4.8.0

FeaturesKernel-mode Authenticode telemetryFor increased speed and reliability, certificate data f...

4.4.8.1

FeaturesExecutable metadata such as product version, company name, etc. for in-memory processes a...

4.4.8.2

FeaturesAdded support for an optional system tray icon. This feature is disabled by default.Fixe...

4.4.9.0

FeaturesKernel-mode DLL telemetryCertificate parsing and trust calculation for all loaded DLLs in...

4.4.9.1

FeaturesNone.FixesIncreased amount of telemetry handled at once by the service for creation and i...

4.4.9.2

FeaturesMemory modification tracking for loaded DLLs.Memory diff generation for modified DLLs.Fix...

4.4.9.4

FixesService dump files are now limited to 10 per version+thread combination.MD5 Hashesservice.ex...

4.5.0.0

FeaturesAI Kernel FirewallAuthenticode hash calculation speedupsSignificantly reduced memory usag...

4.5.0.1

FeaturesOption to migrate to hosted OAuth authentication server domainTask to dynamically configu...

4.5.0.2

FeaturesNone.FixesReduced memory used for AI Kernel Firewall.Quicker usage of new authentication ...

4.5.0.3

FeaturesStatus tray indicator now displays self configuration status for new installations.MD5 Ha...

4.5.1.0

FeaturesOpenSSL is now used for TLS communication.This should sidestep issues on older OS version...

4.5.1.2

FeaturesDropped legacy certificate validating that relied on builtin, slow Windows libraries.Adde...

4.5.2.1

FeaturesBroad release of reports for Fortress AI accessFixesOptimization of Cyber Crucible kernel...

4.5.2.2

FixesOptimization of Cyber Crucible kernel operations via avoidance of problematic windows event ...

4.5.3.0

FeaturesFortressAIAdded notifications when a policy violation is reportedIntegration with Windows...

4.5.3.1

FeaturesFortressAIDetects attempts to bypass policy controls through the use of screenshots.Cyber...

4.5.3.2

FeaturesFortressAINoneCyber Crucible CoreKernel Buffer Operation EnhancementThe driver leverages ...

Middleware (REST Servers)

Web Application