Xcitium Enterprise & Platform, Agents February Release (February 07-08, 2024)

Dear Xcitium Team,

We’re kindly pleased to inform you that the latest version of the Xcitium Enterprise & Platform and Xcitium Endpoint Detection & Response (EDRW) agent are almost live now!

The release schedule was implemented as follows:

  • For the US region, on Wednesday, 2024-02-07T07:00:00Z
  • For the EU region, on Thursday, 2024-02-08T07:00:00Z
  • Agents for both region, on Thursday, 2024-02-08T07:00:00Z

The release was implemented within 30 minutes of deployment, during release time the platform could be under maintenance mode, where you might observe minor glitches.

And if you observe any issues after release, please feel free to share them with us.​

Please check the release notes that are marked by the new release!

Xcitium Enterprise & Platform

NEW FEATURES

  • New ability to define the response type given by EDR for the Windows agent when setting the Alert Policy rule condition on Xcitium Enterprise alert policy configuration page.
  • New ability to terminate a process and generate an alert according to the action specified in the Alert Policy rule condition.
  • Added Response Action information in event details on the Event Search page.
  • Added “Action” information and necessary syntax controls to Event Search query definitions.
  • Added “Action Type” information to the Event Search results data as aggregations and to the result data grid.
  • Added Action Type filtering options on the Alert Search page.
  • Added Action information in alert details on the Alert Search page.

IMPROVEMENTS

  • The Enterprise UI now displays the minimum EDR agent version required to set the response of the EDR for the Windows agent as a label on the Policy Configuration Screens.
  • Added user information messages according to the selected response type.

BUG-FIXES

  • Fixed an issue where incorrect Component Value and Zero HASH data were displayed in Security Events for Containment Events related to certain files.
  • Fixed an issue with the display of ‘Unrecognized’ Xcitium Rating on the Xcitium Portal instead of ‘Trusted’, ensuring accurate file-rating representation.

Endpoint Detection & Response – Windows

NEW FEATURES

  • New ability to terminate a process and generate an alert according to the action specified in the Alert Policy rule condition.

Appendix

NEW PORTAL VERSIONS

  • Xcitium Enterprise: 4.22.0
  • Xcitium Platform: 9.1.1

NEW AGENT VERSIONS

  • Endpoint Detection & Response – Windows (EDR for Windows): 2.8.0

Which Supported Device Platforms are (EDR)? on most list is for 2.4.0

Hi @MaT,

You may check the compliance and support status under /settings/support on Xcitium Enterprise product.:

Best Regards