Insight Agent Release Notes / May 13, 2025

May 13, 20254.0.17

Improved

  • PROCESS_START events now contain the parent process working directory (parent_process.working_dir) field on agents on Windows, Linux, and macOS 15 machines.

    Note: Windows agents must enable the Events Monitor component to collect the new parent process working directory field.

Fixed

  • The Insight Agent's file information job no longer exceeds memory limitations when reading very large filesystems.
  • Assessments no longer write null entries in the file_info.json file after attempting to read metadata from a file that was deleted before analysis. Now, the file information job will skip the file entry if no data is returned.
  • We upgraded the Python cryptography library to version 44.0.2 to address vulnerabilities in previous versions.

Updated Operating System Support

  • As of version 4.0.17, the Insight Agent no longer supports 32-bit architecture for any operating system. For the complete list of supported and unsupported operating systems, refer to our docs.