In this month’s product release, we are addressing the increasing challenge of detecting and removing malware that avoids using executable files. We have visually separated script interpreters and potential host processes from the actual malicious payload in our Incidents panel, making it easier to identify threats. This update ensures that important applications are not mistakenly quarantined due to misuse by threat actors. Additionally, this release includes a new drill-down feature to the Incidents details panel, making it easier and less time-consuming to perform deep investigation alerts. Yesterday, we sent a version of this newsletter that contained incorrect information. If you were one of the people who received it, please accept our apologies. |
