[RELEASE] SecTeer VulnDetect Agent v2.4.2.0 & 3.2.0.0 - 2023-02-20
-
The latest tech preview agent can be downloaded from:
https://vulndetect.com/dl/agents/secteerSetup-3.2.0.0.exeThe Recommended agent for general deployment can be downloaded from:
https://vulndetect.com/dl/secteerSetup.exeVulnDetect Agent 2.4.2.0 is the officially recommended version and the default when you download the Agent within the UI.
VulnDetect Agent 3.2.0.0 is available as a tech preview. We would appreciate if you test and use this on selected systems.
Tech Preview features can be accessed via the User Acceptance Testing (UAT) UI:
https://uat.corporate.vulndetect.com/#/
Most "tech preview" changes are currently available on the "Host" page in the "Windows Update" and "Host Information" tabs. Note that these new features require the latest tech preview Agent.Updating to 3.2.0.0 is currently a manual process, or you may use the Deployment->Create Job feature in Corporate. If you already run a tech preview version, you can also upgrade it automatically under Approvals.
Agent 3.2.0.0 can be downloaded from this location:
https://vulndetect.com/dl/agents/secteerSetup-3.2.0.0.exeAgent 3.0.0.0 marks the end of choco (chocolatey) package support. All packages now use our internally developed system, dubbed TSPM.
The 3.0.1.0 release is also the first to support a new version of our inspection rules, allow synchronous tasks (i.e. not running via Task Scheduler), and it has better support for Windows Update.
3.0.1.0 will also allow better enumeration of user sessions, which in turn will allow us to filter out results for inactive users.
3.1.0.0 has full support for the upcoming Windows Update feature.
3.2.0.0 allows restarting hosts from the UI.
In VulnDetect - Personal you can update to 2.4.2.0 by clicking the blue Update button.
In VulnDetect - Corporate you can update to 2.4.2.0 by clicking the blue "Approve Version in Selected Approvals" and with the green "Automate Selected Approvals" under Patching->Approvals.
Note: Older agents will continue to work, but only 2.1.0.0 and newer supports upgrading user-based installations, it also supports Software Deployment, as well as a new type of packages.
SecTeer strongly recommends upgrading to VulnDetect Agent 2.4.2.0 and running PowerShell 5.1 on a fully supported version of Windows. The agent will work on Windows 7 SP2, Windows 8.1 and Windows Server 2012, but may have limited functionality.
Agents older than 2.3.1.0 may be automatically upgraded by SecTeer. Agents prior to 2.3.1.0 are not considered fully supported, due to missing functionality. This can both affect inspection results and the ability to upgrade certain software.
v3.2.0.0 2023-02-17 - tech preview (release candidate)
- Add support for making the agent request a restart of the host.
v3.1.0.0 2023-01-30 - tech preview (obsolete)
- Add support for applying Windows Updates, through wua-tasks.
- Improvements to task processing.
v3.0.1.0 2022-12-19 - tech preview (obsolete)
- Report task-uuid in inspection data when running inspection tasks.
v3.0.0.0 2022-12-16 (superseded before release)
- Improvements to task-engine.
- Change inspections to run under task-engine, and make agent check-in during inspections.
- New version of inspection rules.
- Additional functionality for Windows Update.
- Change behavior of --immediate command-line argument.
- Remove support for chocolatey.
- Upgrade tools to Visual Studio 2022.
- Update third-party libraries.
- Miscellaneous minor fixes.
v2.4.2.0 2022-10-16 - stable release (recommended)
- Fix issue with uninstalling agent.
- Update zlib dependency to latest versions.
- Update license file.
v2.5.0.0 2022-09-14 (superseded by 2.4.2.0, 2.5.0.0 will never be the recommended version)
- Add session enumeration to allow showing a host's user in the UI.
v2.4.1.0 2022-07-19
- Place task runner files in a subdirectory of our Program Files directory.
- Fix issue with applying directory permissions to task folders.
v2.4.0.0 2022-07-13
- Improvements to task management.
- Improvements to cleanup of task files.
- Copy task runner files to avoid conflicts during upgrades.
v2.3.2.0 2022-07-08
- Refactor cleanup of files generated by tasks.
- Upgrade dependencies.
v2.3.1.0 2022-02-26
- Fix issue with agent install process.
v2.3.0.0 2022-02-25
- Improve task handling with new task-runner app.
- Improvements to agent install process.
v2.2.0.0 2021-12-03
- Sign the Task Scheduler task runner script.
- Change Task Scheduler script execution policy to RemoteSigned.
v2.1.0.0 2021-09-21
- Optimize user lookup functionality to minimize overhead.
v2.0.0.0 2021-09-10
- General availability of Windows Task Scheduler tasks in the agent.
- Avoid running tasks when their registered prerequisites are currently running.
- Expand WMI result value conversion to include some arrays.
v1.5.0.0 2021-07-28
- Add support for scheduling agent tasks with Windows Task Scheduler, to facilitate running tasks as regular users, allowing user-based application management.
- Refactor agent tasks to be more modular, allowing different task provider implementations.
- Refactor configuration data processing to be more generic.
- Fix issue with inspecting certain files with unusual data headers.
- Improve registry querying mechanism to be more dynamic.
- Improve WMI querying mechanism to be more dynamic.
- Add install tokens.
- Miscellaneous minor changes.
v1.4.0.0 2020-06-26
- Collect more properties from Windows Updates.
v1.3.0.0 2020-06-11
- Finalize the Windows Update detection in the agent.
- Correctly merge include and exclude paths from the registry and command-line into the inspection configuration.
- Add a driver-related WMI query.
v1.2.1.0 2020-04-23
- Fix critical regression in pkgapp.
v1.2.0.0 2020-04-21
- Expand Windows Update enumerations to collect more data about updates and Windows Update configuration, and be more configurable.
- Add support for asynchronous Windows Update enumerations, with a configurable timeout.
- Add a configurable timeout when running external processes, in particular when running package tasks.
- Refactor to reduce the size of the executable.
- Correctly report the file size of files that are accessed via a symbolic link.
- Fix a few other minor issues.
v1.1.3.0 2020-03-31
- Sign with new certificate.
- Update year in copyright message.
- Add more install-tokens.
v1.1.2.0 2019-11-13
- Make the installer more robust when doing silent upgrades.
- Update year in copyright message.
v1.1.1.0 2019-11-11
- Add the capability to detect certain errors in filesystem enumeration and add them to the inspection results.
- Add support for exclusive tasks and task priorities.
- Fix miscellaneous minor issues.
v1.1.0.0 2019-11-05
- Version 1.1.0.0 was never released to the public.
- Pass arbitrary command-line options from the installer to the agent and on to the server during installation.
- Enable inspection progress reports to be sent by the agent.
- Add capability to look for specific filenames during inspection, to allow targeted inspections.
- Expand inspection rules to include filenames.
- Add more diagnostic tests.
- Change api endpoints used for inspections to be more consistent with REST principles.
- Upgrade tools to Visual Studio 2019.
- Update third-party libraries.
v1.0.9.0 2019-10-18
- Enable more diagnostic tests.
v1.0.8.0 2019-10-16
- Add support for diagnostic task.
- Add support for capturing log messages during diagnostic tasks, and when upgrading packages.
- Miscellaneous minor fixes.
v1.0.7.0-tok 2019-10-11
- Add more tokens and build tokenized MSI installers with them.
v1.0.7.0 2019-06-04
- Fix issue with registry enumeration.
- Fix issue with MSI enumeration.
v1.0.6.0-tok 2019-05-24
- Create tokenized MSI installers.
v1.0.6.0 2019-05-16
- Fix issue with MSI installer.
v1.0.5.0 2019-05-15
- Fix issue with installer not setting the correct log level.
v1.0.4.0 2019-05-15
- Fix issue with installing agent using email parameter.
v1.0.3.0 2019-05-15
- Enumerate MSI database when inspecting.
- Support wildcards in registry paths when enumerating the registry.
- Preserve non-default logging settings across installations.
- Add support for 8-character base-32 installation tokens in the agent and installer.
- Add inspection tasks.
- Add choco 0.10.13.0 support to pkgapp.
v1.0.2.0 2019-05-01
- Increase the network timeout when submitting large inspections.
- Miscellaneous minor fixes.
v1.0.1.0 2019-02-06
- Fix issue which caused inspections to stall when enumerating files on a drive with no recycle bin.
v1.0.0.0 2019-01-30
- Add support for multiple --path arguments, and add the --ignore argument, which can also be specified multiple times. Support reading these from the registry as well, as the multi-string values 'inspectionPaths' and 'ignorePaths'.
- Detect directory loops and avoid them when enumerating directories.
- Ignore offline files and directories unless a flag is set (--inspect-remote).
- Output current local time as a reference when outputting the configuration.
v0.10.11.0 2018-12-10
- Ignore 64-bit registry rules when running on 32-bit systems.
v0.10.10.0 2018-11-30
- No code changes, only bump the version number to allow testing self-updating.
v0.10.9.0 2018-11-30
- Run package app from a temporary copy to resolve conflict when self-updating.
v0.10.8.0 2018-11-26
- Parse chocolatey output to figure out if an upgrade task worked.
- Change some internal strings for clarity.
v0.10.7.0 2018-11-22
- Stop task processing on certain errors, wait until next check-in and then retry.
- Change the way the installer starts the VulnDetect service to work around an issue when updating the agent.
v0.10.6.0 2018-11-13
- Report task status individually to better support self-updating of the agent.
- Compile with Visual Studio 2017 Professional
v0.10.5.0 2018-11-01
- Add pkg sources to choco
- Agent now sends report for installing choco
v0.10.4.0 2018-10-25
- Fix uninstall icon.
- Add log message when running task.
- Minor internal fixes.
v0.10.3.0 2018-10-22
- Add /email and /token parameters to installer to allow for skipping the email page and for silent mode.
/email and /token are equivalent. Note that if an AuthToken is present in the registery, then any /email or /token option will be ignored.
v0.10.2.0 2018-10-19
- Add task running capabilities to the agent. Currently, the only supported tasks are install-package and upgrade-package, with choco as the only supported package provider.
v0.9.0.0 2018-10-02
- Fetch and parse inspection rules from server before running an inspection
v0.8.4.0 2018-09-04
- When registering, the backend now expects a usernameHash property, rather than a hashedUsername property
- Suppress useless log message when registering
v0.8.2.0 2018-09-03
- Add /server option back to installer
v0.8.1.0 2018-09-03
- Registration endpoint has moved
- Miscellaneous minor changes
- Much work on patching, even though it is still incomplete
v0.6.1.1 2018-05-14
- New application icon
- Move start menu shortcut, use new application icon for it
- Minor change to the way the local timezone is reported to the server
v0.5.3.1 2018-05-10
- Explicitly enable TLS1.2 in WinHTTP, it is disabled by default on older Windows versions
- Set service to AutoStart, and DelayedAutoStart if possible
- Add Start Menu shortcut that loads the SecTeer Personal Carma web page in the user's default browser
v0.5.2.1 2018-05-09
- Unsigned binary sent to user to test TLS change
v0.5.1.1 2018-05-08
- First release
-
VulnDetect Agent 3.2.0.0 is available as a tech preview and release candidate. We would appreciate if you test and use this on selected systems.
Please report any and all issues you find with this latest Agent. It is a prerequisite for upcoming features, however, it is expected to be superseded soon, as more functionality will be added.
(this reply was mostly made to ensure that this thread is at the top)
-
This post is deleted! -
2.4.2.0 is the latest and Recommended SecTeer VulnDetect Agent release:
v2.4.2.0 2022-10-16
- Fix issue with uninstalling agent.
- Update zlib dependency to latest versions.
- Update license file.
(this reply was made to ensure that this thread is at the top)
-
This post is deleted!