...

• Reports for incidents and telemetry are stored and protected on disk for offline scenarios.

  • Due to tampering attempts observed against multiple EDR/XDR logging stores, Cyber Crucible enabled kernel-level protection against the disk-stored data.

• Increased protection of the service process used for backend communication and updates, as part of look-ahead zero-trust hardening.

  • This was not in response to an existing threat, but proactive for one the Team sees upcoming.

Fixes

• Fixed processes that load at boot not being available in the dashboard under process creations.

• Prevented two installers from running at the same time, which if time quick enough would use register the same machine twice.

...