What's New in Endpoint Detection and Response
The Qualys Endpoint Detection and Response (EDR) Release Notes provide detailed information on the latest features, enhancements, and fixes introduced in each version of the EDR application. Here's an overview of the key updates from recent releases:
EDR Release 3.7.2
- Introduced new permissions that provide greater control over quarantining assets at both the global and job levels.
- Added a New Event Action to Modify Registry Events.
- Updated the Linux Hardware Requirements section to provide clearer guidance on the minimum hardware specifications for Linux EDR/EPP.
EDR Release 3.7.1
- EDR onboarding is now available for macOS devices, including both Intel-based and Apple Silicon (ARM) Macs.
- Added new permissions to EDR roles to provide more granular access control within the EDR UI.
- Renamed the toggle previously labeled "Notifications" to "Local Desktop Notifications."
- Updated EDR status information by removing date and time details. The status now only displays Active, Inactive, or Disabled.
- Qualys has implemented API versioning to enhance flexibility and ensure long-term compatibility.
UI Release Notes | API Release Notes
EDR Release 3.7
- Expanded our Advanced Hunting functionality to offer more control over both system-generated and custom queries.
- Added support for uploading JSON files to manage exclusions in Antimalware Profiles, saving time and reducing manual errors.
- Added support for Linux assets in Asset Configuration.
- Added a new support that allows modifying IPs, apps, and domains on quarantined assets without unquarantining them.
EDR Release 3.6.1
- Added a new capability in the Assets tab that lets you retry failed Antimalware Protection (EPP) installations with a single click.
- Added a real-time scanning feature that provides immediate endpoint assessment capabilities.
EDR Release 3.6.0
- Introduced new and improved UI 4.0.
- Renamed the Qualys Cloud Platform to the Qualys Enterprise TruRisk™ Platform.
- Added Email Alerts functionality for threats, system status, and configuration changes.