Contents and detection
A list of the improvements for the Contents and Detection that have been introduced in this release.
- ENG-2292: Improved Common Platform Enumeration (CPE) generation for software and applications, resulting in higher match coverage and accuracy.
- ENG-2337: Mappings for Windows Build versions to generate CPEs can now be updated thanks to Threat Feeds.
- ENG-2897: Content updates for Threat Intelligence (TI) and Asset Intelligence (AI) now download in smaller increments with configurable bandwidth and concurrency limits, significantly reducing daily network usage for large fleets.
- ENG-2942: We clarified the meaning of the potentially unwanted application (PUA) and dual-use concepts that are used in several alert types.