EDR Release 3.7.2

June 20, 2025

New Permissions for Asset Configuration

We have introduced new permissions that provide greater control over quarantining assets at both the global and job levels.

Global-Level Permissions

With global-level permissions, you can view, add, edit, and delete quarantined assets via:

• Configuration > Asset Configuration
  
• Assets > locate the asset > hover to open the Quick Actions menu > click Quarantine Asset
  

Job-Level Permissions

With job-level permissions, you can view, add, edit, and delete quarantined assets via:

Assets > locate the asset > hover to open the Quick Actions menu > click Quarantine Asset

Required Permissions 

The table below indicates which permissions should be selected for global-level and job-level access.

Global-Level Permissions
Job-Level Permissions

Added a New Event Action to Modify Registry Events

We have added a new event action, Modified, to the Action token drop-down menu under the Hunting > Events tab. This enhancement enables you to filter and investigate modified registry events more effectively.

Content Enhancement

We have updated the Linux Hardware Requirements section to provide clearer guidance on the minimum hardware specifications for Linux EDR/EPP. These standardized guidelines apply to all supported Linux agent versions and not tied to any specific release, ensuring consistent system stability and performance across different releases.

Key updates include:

• Recommended and Supported Configurations to reduce the risk of high CPU or memory utilization and ensure optimal performance.
• Details on configurable CPU and memory usage thresholds for EDR.
• Instructions on how to customize resource limits based on your environment.