All release notes
Platform
Change detection, made selective
Agent-driven change detection is significantly hardened: port exposure changes are grouped, scheduled tasks use smarter heuristics, high-signal security conditions get dedicated open/resolve logic, and the risk list gains a dedicated Changes view.
New
- Dedicated Changes view in the risk list; all agent-generated change risks in one place, separate from CVE correlation and manual entries.
- Port exposure changes are grouped into a single stacked risk per device instead of generating a separate risk per port change.
- Scheduled task detection is now more selective: obfuscated task names and high-risk command interpreters (PowerShell, WScript, CScript, MSHTA) increase severity; known Windows and vendor tasks are suppressed.
- High-signal security conditions; Defender exclusions, local admin changes, startup persistence, antivirus and BitLocker state, firewall changes, and shared folder exposure; each have dedicated open and resolve logic.
- Agent change risks resolve automatically when the underlying condition clears, and reopen if the same condition returns.
Improved
- Risk deduplication is now stable: repeated agent check-ins for the same condition no longer create new risks.
- Windows agent and enrollment defaults aligned to a 1-hour inventory interval.