May 13, 2025
4.0.17.21

This release includes an improvement to process start event details, a few fixes, and an update regarding the type of operating system architecture supported by the Insight Agent.

Release Notes Revision - July 2, 2025 The Insight Agent release notes initially published on May 13, 2025, mistakenly cited the product version as 4.0.17. We have updated the release notes to accurately reflect the correct version: 4.0.17.21. All other content remains unchanged. Our apologies for any confusion this may have caused.

Improved
Copy link

  • PROCESS_START events now contain the parent process working directory (parent_process.working_dir) field on agents on Windows, Linux, and macOS 15 machines.

    Note: Windows agents must enable the Events Monitor component to collect the new parent process working directory field.

Fixed
Copy link

  • The Insight Agent’s file information job no longer exceeds memory limitations when reading very large filesystems.
  • Assessments no longer write null entries in the file_info.json file after attempting to read metadata from a file that was deleted before analysis. Now, the file information job will skip the file entry if no data is returned.
  • We upgraded the Python cryptography library to version 44.0.2 to address vulnerabilities in previous versions.

Updated Operating System Support
Copy link

  • As of version 4.0.17, the Insight Agent no longer supports 32-bit architecture for any operating system. For the complete list of supported and unsupported operating systems, refer to our docs.