4.4.5.2

Features New kernel level access telemetry for network-based behaviors, to better identify possible client-side networking bugs, or opportunities to optimize Outbound telemetry is now bundled and sent together, just like inbound settings Transmitted with a 25% timing variance, so that every machine will not be sending packets simultaneously across a client network HTTP/2 is now fully utilized end to end Fixes Reduced minimum threads in use in userspace Reduced CPU usage for userspace service Agent-Server authentication is now performed more efficiently Replaced previous service sleep <> restart algorithm when licenses were not available. Previous algorithm caused a "service exited unexpectedly" in event manager every 15 minutes. Allowing the Operating System to tell the service to shut off (something abused by criminals and other security tools) would have allowed a “clean” service restart without event manager logs. Instead of creating that vulnerability, Cyber Crucible’s service restarted itself without Windows involvement, causing the event log. MD5 Hashes service.exe = b17a2a528a4424771fdeca8559b9f56b
CCRRSecMon.sys (Windows7) = c2b051b1001474419e7572fd23625d84
CCRRSecMon.sys (Windows8) = 335d355bbd492c390e67ac615c5252b0
CCRRSecMon.sys (Windows10) = 0d1fc32fba2cb878ce8cb0f549b8d167