{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"redocly_category":"Release notes","type":"markdown"},"seo":{"title":"v3.8.7 October 12, 2026","description":"Coro's support and product documentation portal","siteUrl":"https://docs.coro.net","keywords":"Coro docs portal, documentation, support, docs","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"v387-october-12-2026","__idx":0},"children":["v3.8.7 October 12, 2026"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Version 3.8.7 includes:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#new-features"},"children":["New features"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#enhancements"},"children":["Enhancements"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"#agent-updates"},"children":["Agent updates"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"new-features","__idx":1},"children":["New features"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This section describes the new features added in version 3.8.7."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1---coro-console","__idx":2},"children":["1 - Coro console"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following features have been added to the Coro console:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"11---executive-summary-report","__idx":3},"children":["1.1 - Executive summary report"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This release enhances the Executive Summary report by including new information:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["New trend charts in the top summary section to represent changes in users, devices, and tickets since the preceding period."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Total tickets by module and top vulnerabilities"]}," has been replaced by ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Security impact this period"]},", showing an overview of the impact Coro has had on your workspace by detecting and remediating threats. This section provides summary statistics for each enabled module with the number of tickets raised for significant trigger events."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["For each module in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Protection"]}," section, Coro now shows trend graphs for generated tickets during the period."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["For ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cloud security"]},", a new pie chart showing ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Suspected bot attacks"]}," per country. The top 5 countries are displayed separately, with all others grouped into a single category."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["For ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Email security"]},", new panels showing entries added to the allowlist and blocklist, the number of warning-only email events, and the percentage of warning-only emails measured against all inbound email."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Security Awareness Training"]}," section has been redesigned for better presentation. It also now includes pie charts showing completion of scheduled training and interaction with phishing simulations."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/console/reports/summary-report"},"children":["Reports"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"2---connectors","__idx":4},"children":["2 - Connectors"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following features have been added to Connectors:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"21---api","__idx":5},"children":["2.1 - API"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro’s public API is enhanced with the following changes:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["New ticket endpoint descriptions with much greater detail about available actions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["New ticket comment endpoint."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/developer-portal/changelog"},"children":["API change log"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"3---endpoint-security-and-edr","__idx":6},"children":["3 - Endpoint Security and EDR"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following features have been added to Endpoint Security and EDR:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"31---windows-asr-rules","__idx":7},"children":["3.1 - Windows ASR rules"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This release adds support for Microsoft Defender Attack Surface Reduction (ASR) rules to detect common attack techniques on Windows endpoint devices, such as macro abuse, Office child process spawning, and WMI persistence."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Admin users can enable Windows ASR rules for selected device labels through the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Endpoint Detection & Response"]}," settings page."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/edr/edr-settings"},"children":["EDR settings"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"4---cloud-backup-module-improvements","__idx":8},"children":["4 - Cloud Backup module improvements"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following features have been added to Cloud Backup:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"41---new-connectors","__idx":9},"children":["4.1 - New connectors"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Subscribers to Coro’s Cloud Backup module can now connect Dynamics 365/Power Platform, Autodesk Forma, and Jira/Jira Service Management services for backup and restore."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/cloudbackup/intro#supported-cloud-apps"},"children":["Supported cloud apps"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"42---editable-service-configuration","__idx":10},"children":["4.2 - Editable service configuration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Managed Service Provider admin users can now edit an existing customer’s Cloud Backup service to add or remove connectors, or to modify the seat count."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/cloudbackup/addcustomer#updating-the-connector-configuration-for-an-existing-connector"},"children":["Updating the connector configuration for an existing connector"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"43---child-workspace-filtering","__idx":11},"children":["4.3 - Child workspace filtering"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Managed Service Provider admin users can now only activate Cloud Backup for their customer workspaces where an active Cloud Backup subscription is in place."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/cloudbackup/addcustomer#adding-cloud-backup-to-a-workspace-subscription"},"children":["Adding customer workspaces for cloud backups"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"44---backup-activity-for-inactive-workspaces","__idx":12},"children":["4.4 - Backup activity for inactive workspaces"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro now stops Keepit from creating backups when the Cloud Backup module is disabled in a workspace subscription, or where a workspace moves to inactive status."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/cloudbackup/addcustomer#backup-activity-for-inactive-workspaces"},"children":["Backup activity for inactive workspaces"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"enhancements","__idx":13},"children":["Enhancements"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Version 3.8.7 introduces the following additional changes:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1---coro-console-enhancements","__idx":14},"children":["1 - Coro console enhancements"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"11---msp-global-view","__idx":15},"children":["1.1 - MSP Global view"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The workspace hierarchy view in the MSP Global View has been improved in the following ways:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The left and right panes now scroll independently, improving how you view the workspace tree against the information pane."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/msp/overview#using-hierarchy-view"},"children":["Using hierarchy view"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"12---ticket-archiving","__idx":16},"children":["1.2 - Ticket archiving"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro now archives closed tickets after 90 days of inactivity."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Archived tickets cannot be viewed through the console, and cannot be unarchived. However, Coro still provides visibility of all current and archived tickets through the Ticket Log CSV export."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/overview/tickets"},"children":["Tickets in Coro"]}," and ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/console/reports/exports"},"children":["Viewing and creating exports"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"13---mcp-server-role-based-access","__idx":17},"children":["1.3 - MCP server role-based access"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro’s MCP server now applies role-based access in parity with the console. That is, when an admin user authenticates through the MCP server, Coro assigns access privileges based on the role assigned to that account in the workspaces the user can access."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/admin/mcpserver"},"children":["Connecting AI services to Coro"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"2---cloud-security","__idx":18},"children":["2 - Cloud Security"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"21---unprotected-user-status-is-preserved-on-cloud-sync","__idx":19},"children":["2.1 - Unprotected user status is preserved on cloud sync"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If an admin user marks a user in a protected group with ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Protection disabled"]},", Coro retains this excluded status even after an automatic or manual cloud resynchronization."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/users/protected-users"},"children":["User Management"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"3---data-governance","__idx":20},"children":["3 - Data Governance"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"31---new-monitored-data-type-for-credentials-and-secrets","__idx":21},"children":["3.1 - New monitored data type for credentials and secrets"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This release adds a new security and business-sensitive data type for monitoring in your User Data Governance configuration - ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Credentials and secrets"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This covers data items such as API keys, access tokens, client secrets, cloud credentials, connection strings, private keys, and signed URLs."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/userdatagov/udg-monitoring#configuring-data-governance-settings"},"children":["Configuring Data Governance settings"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"32---ticket-findings-for-security-and-business-sensitive-data","__idx":22},"children":["3.2 - Ticket findings for security and business sensitive data"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When a User Data Governance ticket is triggered for a security and business sensitive data types violation, Coro now displays a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Findings"]}," section in the ticket."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This impacts the following security and business sensitive data types:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Passwords"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Certificates"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Source code"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Data objects with specific keywords"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Credentials and secrets"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Specific file types"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/console/ticket-logic-users"},"children":["Ticket types for User Data Governance"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"4---endpoint-security-and-edr","__idx":23},"children":["4 - Endpoint Security and EDR"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"41---scan-performance-mode","__idx":24},"children":["4.1 - Scan performance mode"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["This feature requires Coro Agent v3.8.7"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In this release, Coro enables you to select the performance mode for your endpoint scans."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Choose from:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Low impact"]}," - The scan uses fewer system resources, but takes longer to complete."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["High impact"]}," - The scan uses greater system resources, resulting in a faster scan."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Scan quality is unaffected, and this new setting only impacts the amount of system resources (CPU and RAM) Coro consumes to complete the scan cycle. Admin users can choose the approach that best suits their requirements."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/devices/settings#scan-performance-mode"},"children":["Scan performance mode"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"42---file-integrity-monitoring","__idx":25},"children":["4.2 - File integrity monitoring"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["This feature requires Coro Agent v3.8.7."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro now includes a new endpoint device policy - Monitor File Integrity - that regularly checks one or more files for changes."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro raises a File Integrity Violation ticket for any detected changes."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/endpointsecurity/policies"},"children":["Device Policies"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"5---email-security","__idx":26},"children":["5 - Email Security"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"51---blocked-emails-contain-the-original-sender-timestamp","__idx":27},"children":["5.1 - Blocked emails contain the original sender timestamp"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When Coro’s Inbound Gateway blocks emails and later releases/allows them, Microsoft 365 and Google Workspace display the email's timestamp as the release date and time, rather than the original send date and time."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In this release, Coro is adding the original send date and time to a banner within the email."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/emailproxy/incoming/handled"},"children":["How Coro handles malicious email"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"agent-updates","__idx":28},"children":["Agent updates"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This section describes the following additional Agent updates that we are releasing with version 3.8.7."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"prerequisites","__idx":29},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Coro Agent software must be updated on your device before changes take effect. The features described may not function until the updated macOS and Windows Agents are installed. Coro commences roll-out of Agent updates after the release."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1---macos-and-windows-agent-387","__idx":30},"children":["1 - macOS and Windows Agent 3.8.7"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["macOS and Windows Agent 3.8.7 includes the following:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"11---show-protection-disabled-status","__idx":31},"children":["1.1 - Show protection disabled status"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If an admin user has disabled protection for the device from the console, the agent now shows this status in the desktop app."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"12---extend-the-restart-window-for-updates-that-require-a-reboot","__idx":32},"children":["1.2 - Extend the restart window for updates that require a reboot"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When an agent update required a device restart, Coro previously allowed only a 60-minute notice, a 60-second final warning, and then restarted the device with no way to postpone."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This release introduces an extended restart countdown of three hours. A restart-now option is provided at each reminder, but now with the option to postpone by a further 60 minutes."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Coro still enforces a restart at the three-hour mark as the device is unprotected until the restart completes."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"13---agent-scans-run-sequentially","__idx":33},"children":["1.3 - Agent scans run sequentially"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The agent now ensures conflicting malware and sensitive data scans do not overlap and run concurrently. If the agent is scheduled to perform both types of scan (perhaps due to a period of being offline), malware scans take priority and start first. Other scans start only after the malware scan has completed."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"14---show-real-time-scan-progress-in-the-agent-app","__idx":34},"children":["1.4 - Show real-time scan progress in the agent app"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["End users can now view real-time scan progress from the desktop app."]}]},"headings":[{"value":"v3.8.7 October 12, 2026","id":"v387-october-12-2026","depth":1},{"value":"New features","id":"new-features","depth":2},{"value":"1 - Coro console","id":"1---coro-console","depth":3},{"value":"1.1 - Executive summary report","id":"11---executive-summary-report","depth":4},{"value":"2 - Connectors","id":"2---connectors","depth":3},{"value":"2.1 - API","id":"21---api","depth":4},{"value":"3 - Endpoint Security and EDR","id":"3---endpoint-security-and-edr","depth":3},{"value":"3.1 - Windows ASR rules","id":"31---windows-asr-rules","depth":4},{"value":"4 - Cloud Backup module improvements","id":"4---cloud-backup-module-improvements","depth":3},{"value":"4.1 - New connectors","id":"41---new-connectors","depth":4},{"value":"4.2 - Editable service configuration","id":"42---editable-service-configuration","depth":4},{"value":"4.3 - Child workspace filtering","id":"43---child-workspace-filtering","depth":4},{"value":"4.4 - Backup activity for inactive workspaces","id":"44---backup-activity-for-inactive-workspaces","depth":4},{"value":"Enhancements","id":"enhancements","depth":2},{"value":"1 - Coro console enhancements","id":"1---coro-console-enhancements","depth":3},{"value":"1.1 - MSP Global view","id":"11---msp-global-view","depth":4},{"value":"1.2 - Ticket archiving","id":"12---ticket-archiving","depth":4},{"value":"1.3 - MCP server role-based access","id":"13---mcp-server-role-based-access","depth":4},{"value":"2 - Cloud Security","id":"2---cloud-security","depth":3},{"value":"2.1 - Unprotected user status is preserved on cloud sync","id":"21---unprotected-user-status-is-preserved-on-cloud-sync","depth":4},{"value":"3 - Data Governance","id":"3---data-governance","depth":3},{"value":"3.1 - New monitored data type for credentials and secrets","id":"31---new-monitored-data-type-for-credentials-and-secrets","depth":4},{"value":"3.2 - Ticket findings for security and business sensitive data","id":"32---ticket-findings-for-security-and-business-sensitive-data","depth":4},{"value":"4 - Endpoint Security and EDR","id":"4---endpoint-security-and-edr","depth":3},{"value":"4.1 - Scan performance mode","id":"41---scan-performance-mode","depth":4},{"value":"4.2 - File integrity monitoring","id":"42---file-integrity-monitoring","depth":4},{"value":"5 - Email Security","id":"5---email-security","depth":3},{"value":"5.1 - Blocked emails contain the original sender timestamp","id":"51---blocked-emails-contain-the-original-sender-timestamp","depth":4},{"value":"Agent updates","id":"agent-updates","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":3},{"value":"1 - macOS and Windows Agent 3.8.7","id":"1---macos-and-windows-agent-387","depth":3},{"value":"1.1 - Show protection disabled status","id":"11---show-protection-disabled-status","depth":4},{"value":"1.2 - Extend the restart window for updates that require a reboot","id":"12---extend-the-restart-window-for-updates-that-require-a-reboot","depth":4},{"value":"1.3 - Agent scans run sequentially","id":"13---agent-scans-run-sequentially","depth":4},{"value":"1.4 - Show real-time scan progress in the agent app","id":"14---show-real-time-scan-progress-in-the-agent-app","depth":4}],"frontmatter":{"seo":{"title":"v3.8.7 October 12, 2026"}},"lastModified":"2026-10-12T16:03:50.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/rn/v3.8.7","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}