Contents and detection

A list of the improvements for the Contents and Detection that have been introduced in this release.

  • ENG-2292: Improved Common Platform Enumeration (CPE) generation for software and applications, resulting in higher match coverage and accuracy.
  • ENG-2337: Mappings for Windows Build versions to generate CPEs can now be updated thanks to Threat Feeds.
  • ENG-2897: Content updates for Threat Intelligence (TI) and Asset Intelligence (AI) now download in smaller increments with configurable bandwidth and concurrency limits, significantly reducing daily network usage for large fleets.
  • ENG-2942: We clarified the meaning of the potentially unwanted application (PUA) and dual-use concepts that are used in several alert types.