The Audits module 1.0.176 release includes enhancements, resolved issues, and known issues.
Enhancements
Support for Windows 11 24H2 and Windows Server 2025
This release supports the Kernel Hook Detection and Driver memory audits on Windows 11 24H2 (build: 26100) and Windows Server 2025 operating systems.
Resolved issues
This release provides resolution for the following issues.
Reference | Resolution |
|---|---|
ENDPT-226027 | Resolves an issue where the Kernel Hook Detection audit was failing on Win 11 23H2 (build: 22635). |
ENDPT-226437 | Resolves an issue where bulk acquisition in NFS volume share was failing to traverse. |
ENDPT-225839 | Previously, Comprehensive Investigative Details used to take longer to acquire data from the Windows endpoint. This release reduces the time by optimizing the Event Logs audit. |
Known issues
The following issues are known in the Audits module 1.0.176 release.
Reference | Description |
|---|---|
ENDPT-226000 | Kernel Hook Detection audit does not return System Service Descriptor Table (SSDT) hooking data. |
ENDPT-227102 | The Audits version 1.0.176 on Linux and macOS endpoints is not reflecting in Raw sysinfo under Host Management Module. |
Additional information
Product compatibility
This section describes the product compatibility for Audits Module 1.0.176 release. This release is compatible with the following Trellix product versions:
Endpoint Security Agent (HX) version | Endpoint Security (HX) Server version | Operating System environments |
|---|---|---|
36.30.0 | 10.0.0 or later | Windows, macOS, and Linux |
Following browsers are supported for Browser Audits:
Brave
Firefox
Google Chrome
Internet Explorer 11 (Windows only)
Microsoft Edge
Safari (macOS only)