Endpoint Agent Release Notes - April 2025 – ThreatDown Support Portal

The ThreatDown Endpoint Agent has been updated with new features, improvements, and bugs fixed in April 2025. Release notes are viewable below.

Windows

Windows ARM

macOS

Linux

Mobile

EA-2025-04-30-WIN

Feature: Rebranded the Endpoint agent with ThreatDown logos and images.
Feature: Enhanced user experience with dark mode, updated notifications, icons, and scan progress indicators.
Feature: Added support for Allowlist with Device Control. Admins can create allow rules for USB devices based on make, device name, and serial number.
Feature: Introduced an additional detection method with Microsoft's Anti-Malware Scan Interface (AMSI), allowing ThreatDown to proactively block malicious scripts from executing on customer machines.
Feature: Added support for MD5 Hash exclusions with the Malware and Ransomware Behavior Protection exclusion categories.
Feature: Added Windows Firewall Management plugin. Admins have full control over firewall configurations within Nebula, adding an extra layer of protection between trusted internal networks and external threats, safeguarding against unauthorized access and cyberattacks.
Feature: Added Browser Phishing Protection plugin. Admins can safeguard their employees from web-based threats, ensuring secure and seamless browsing experiences.
Feature: Added support for Preview Patches. Admins can now exclude Windows Preview patch updates from scheduled asset-related tasks.

Refer to the table below for the changes to the Endpoint Agent on Windows included in this release.

Component Name	Version
Agent Updated	2.0.0.250
Agent Service Updated	2.0.0.131
User Agent Updated	2.0.0.43
Asset Manager Updated	2.0.0.27
Endpoint Protection Updated	2.0.0.35
Endpoint Detection and Response Updated	2.0.0.15
Software management SDK	4.3.4532
Endpoint Service Monitor Updated	1.0.0.74
Protection Service	4.6.34.393
Component Package	1.0.2557
Brute Force Protection Updated	2.0.0.67
Active Response Shell Updated	2.0.0.5
DNS Content Filtering	1.2.0.94
DNS Crypt Proxy	2.1.88
SIEM Updated	2.0.0.46
Browser Phishing Protection Updated	2.0.0.13
Firewall Management Updated	2.0.0.29

EA-2025-04-28-WIN

Refer to the table below for the changes to the Endpoint Agent on Windows included in this release.

Component Name	Version
Agent	1.2.0.1141
Agent Service	1.2.0.599
User Agent	1.2.0.490
Asset Manager	1.2.0.723
Endpoint Protection	1.2.0.1209
Endpoint Detection and Response	1.2.0.411
Software management SDK	4.3.4532
Endpoint Service Monitor	1.0.0.71
Protection Service Updated	4.6.34.393
Component Package Updated	1.0.2557
Brute Force Protection	1.2.0.338
Active Response Shell	1.2.0.49
DNS Content Filtering	1.2.0.94
DNS Crypt Proxy	2.1.88
SIEM	1.2.0.354

EA-2025-04-07-WIN

Refer to the table below for the changes to the Endpoint Agent on Windows included in this release.

Component Name	Version
Agent	1.2.0.1141
Agent Service	1.2.0.599
User Agent	1.2.0.490
Asset Manager	1.2.0.723
Endpoint Protection	1.2.0.1209
Endpoint Detection and Response	1.2.0.411
Software management SDK Updated	4.3.4532
Endpoint Service Monitor	1.0.0.71
Protection Service	4.6.29.381
Component Package	1.0.2510
Brute Force Protection	1.2.0.338
Active Response Shell	1.2.0.49
DNS Content Filtering	1.2.0.94
DNS Crypt Proxy	2.1.88
SIEM	1.2.0.354

No release this month.

EA-2025-04-24-LINUX

Fix: Resolved issues where scans would fail.
Fix: Resolved an issue that caused incorrect error messages in the logs when the system was closing certain background processes.

Refer to the table below for the changes to the Endpoint Agent on Linux included in this release.

Component Name	Version
Agent Updated	1.1.74

EA-2025-04-15-LINUX

Refer to the table below for the changes to the Endpoint Agent on Linux included in this release.

Component Name	Version
Agent Updated	1.1.72

Android

iOS

No release this month.