Insight Agent Release Notes / May 28, 2024

May 28, 20244.0.8

New

  • The new Insight Agent installer experience is now live! The new .pkg, .rpm, and .deb Insight Agent installers are now directly available for download from a new Agent Installer tab in Agent Management. The Agent Installer tab also includes the SHA keys for each Agent installer and the new Agent Installer Archive. Follow the Agent Download and Installation Overview for more details on accessing the new installers and deploying the Agent on Linux and Mac.

Improved

  • The Insight Agent now supports the string output format of the audisp-af_unix plugin of auditd on Linux. Audit 3.1.1 introduced a bug that caused messages to be corrupted in binary format. This issue impacts all events from the Insight Agent, causing them to not be sent to the Platform. We recommend updating the Insight Agent to any version 4.0.8 or above and to use the string output format, which is supported starting this version.

  • We updated OpenSSL in the Insight Agent to version 3.2.1. This OpenSSL version resolves several CVE vulnerabilities that were reported in previous versions of the Insight Agent. Refer to the OpenSSL 3.2 Release Notes for more information.

Fixed

  • We fixed an issue that caused the Insight Agent's jobs to fail intermittently due to communication timeouts.
  • We added a recovery method for the Velociraptor client component so that it can re-establish its communication with the Agent Core sub-process if it is interrupted unexpectedly.