Malware Detection

We resolved an issue that caused crashes when adding new Yara rules to our signature collection. This update ensures the Yara workers do not crash upon receiving a new rule while running.

SSL Certificate

Users can now manually add SSL certificates directly to the JSON file (CertificateMapping). Manually added certificates will take precedence over collected certificates. Introduced periodicCertCollection, a new setting that allows users to define the frequency of certificate verification checks, by default it happens every 5 minutes. This feature offers greater control over SSL certificate management. Addressed a problem where application IDs were disappearing.

Changelog:

MalwareDetection

•    Fixed an issue where a crash could have happened when new Yara rules added to the signature collection

SslTerminating

•  If the user manually adds certificates to the JSON file,  those certificates will be used first.

•  A new config option has been added to allow users to set the number of minutes to run the certificate check. This defaults to 5 minutes. Configuration name is: periodicCertCollection

• Fixed an issue that caused app_ids to disappear.

Please update your agent version or if you have specific settings or applications preventing automatic updates. You can follow our documentation on how to proceed to have the latest version installed.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.