Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Cylance Endpoint Security Release Notes
  4. CylancePROTECT Desktop release notes

CylancePROTECT Desktop
 release notes

The following tables provide information about the new features of
CylancePROTECT Desktop
 in the management console. For the agents, information is available in their separate sections:

What's new in the management console for
CylancePROTECT Desktop
 (January 2024)

Feature
Description
Software inventory (
Windows
 only)
This feature allows administrators to identify applications that may be a source of vulnerabilities, prioritize actions against vulnerabilities, and address them accordingly. Administrators can view all applications installed on devices that are registered with the tenant and view a list of applications that are installed on individual devices.
  • Administrators can enable this feature for devices through the device policy in the
    Agent Settings
     tab.
  • Devices must be running
    CylancePROTECT Desktop
     agent version 3.2 or later.
  • To view a list of all applications installed on devices, navigate to
    Assets > Installed Applications
     in the console.
  • To view a list of applications on an individual device, navigate to
    Assets > Devices > Threats & Activities > Installed Applications
     in the console.
Enhanced script control using script scoring (
Windows
 only)
The
CylancePROTECT Desktop
 agent now supports enhanced script control using script scoring. Scripts that have an unsafe or abnormal threat score can be intelligently blocked from executing and alerted to the management console.
  • Devices must be running
    CylancePROTECT Desktop
     agent version 3.2 or later. Devices running unsupported agents will default to block scripts.
  • Administrators can configure the Active Script or PowerShell Script setting from the Script Control tab in the device policy to block scripts that
    CylancePROTECT
     considers to be unsafe or abnormal.
Alert mode for the use of PowerShell Console (Script control for
Windows
 only)
The
CylancePROTECT Desktop
 agent now supports Alert mode for the use of PowerShell Console in interactive mode, so that detected events are reported to the management console while still allowing them to run.
  • Devices must be running
    CylancePROTECT Desktop
     agent version 3.2 or later. Devices running unsupported agents will default to block the use of PowerShell console.
  • Administrators can control the setting from the Script Control tab in the device policy using the PowerShell Console drop-down menu.

What's new in the management console for
CylancePROTECT Desktop
 (October 2023)

Feature
Description
Background threat detection on-demand scan
Administrators can now initiate a background threat detection scan on demand from the management console.
  • Devices must be running
    CylancePROTECT Desktop
     agent version 3.2 or later.
  • The command can be sent from the Device Details screen for an individual device, or for multiple devices at once from the Devices screen.
Note that if background threat detection scans are running on several VM devices that are from the same VM host at the same time, device performance will be impacted due to resource sharing.

What's new in the management console for
CylancePROTECT Desktop
 (May 2023)

Feature
Description
DLL exclusions for memory protection (
Windows
 only)
In the device policy, you can now add memory protection exclusions for third-party application DLLs. For example, if you are running third-party security products in addition to
CylancePROTECT
, you can add an exclusion for the appropriate .dll files so that
CylancePROTECT
 ignores specific violations for those products.  
This feature supports the Malicious Payload and System DLL Overwrite violation types only.
The following rules apply when you specify a DLL exclusion:
  • You must select the
    Treat as DLL exclusion
     option in the device policy.
  • The device must be running
    CylancePROTECT Desktop
     agent version 3.1.1001 or later on a
    Windows
     device. 
  • The exclusion file path that you specify must be the full, direct path to the .dll file. Wildcards are not allowed.
  • The .dll file must be signed using a certificate that is trusted on the device where
    CylancePROTECT Desktop
     is installed. Otherwise, it will not be excluded.