Hi Community,
Core Agent v2.3.0 is now available!
This version of the Core Agent supports new Endpoint Detection and Response features. Customers with an Intercept X Advanced with EDR license will get these enhancements:
- Threat Searches now allow admins to search for activity by admin tools which could be used for malicious purposes. Currently this feature only finds Powershell activity. The admin tool Threat Search also lets admins search for arguments passed when an admin tool is run.
- Forensic Snapshots now capture Windows Authentication events that are captured in the Windows security event log.
For full details, please refer to the Release Notes.
Cheers,
This thread was automatically locked due to age.