New
- New data collection for Patch Tuesday: We updated the Insight Agent's data collection capabilities on Windows assets to support Patch Tuesday vulnerability checks for April 2023.
- More Sysmon events for Events Monitor: The Events Monitor component can now collect the Event ID 8: CreateRemoteThread and Event ID 25: Process Tampering Sysmon events and forward them to the Insight Platform.
- This change is shipped independently of this Insight Agent version release. Sysmon is configured automatically by the Sysmon Installer component. If you have a Rapid7 deployment of Sysmon, you can view these new events in InsightIDR's Log Search feature under the Endpoint Activity log set.
Fixed
- We fixed an inconsistent certificate revocation lookup requirement that impacted token-based Insight Agent installations.
Updated Operating System Support
As of version 3.2.6, the Insight Agent no longer supports these operating systems (see our operating system support page for the latest information):
| Name | Architecture | Build | Supported Insight Agent version range (inclusive) | EOL for Insight Agent support |
|---|---|---|---|---|
| openSUSE LEAP 15.3 | x86-64 | - | 1.4.7 through 3.2.5 | Nov 30, 2022 |
| Ubuntu 21.10 | x86-32, x86-64 | - | 1.4.7 through 3.2.5 | Jul 31, 2022 |
| Fedora 34 | x86-32, x86-64 | - | 1.4.7 through 3.2.5 | May 17, 2022 |
| Fedora 35 | x86-32, x86-64 | - | 1.4.7 through 3.2.5 | Dec 12, 2022 |
| Debian 9 | x86-32, x86-64 | - | 1.4.7 through 3.2.5 | Jun 30, 2022 |
| macOS Mojave 10.14 | x86-64 | - | 1.4.7 through 3.2.5 | Nov 15, 2022 |
| Windows 8.1 | IA-32, x86-64 | 6.3.9600, 6.3.9200 | 1.4.7 through 3.2.5 | Jan 10, 2023 |
| Windows Server 2012 R2 | x86-64 | - | 1.4.7 through 3.2.5 | Apr 10, 2023 |