Endpoint details now show recent activity, the configuration the endpoint actually receives, health metrics, uptime and the approximate location of the endpoint's IP address.
Added a read-only console and file browser for individual endpoints. While a session is open, the endpoint checks in every few seconds, and it returns to its normal interval when the session ends.
Redesigned the query and file-collection views, with clearer status, per-endpoint progress and controls.
The endpoint agent can now carry out response actions: run a signed script, stop a process, quarantine or restore a file, delete a file, and isolate or release an endpoint's network. Each action needs a signed, single-use, short-lived authorization. Actions support a dry-run mode, a safe-mode switch and rate limits, and every action is recorded in an audit trail on the endpoint.
Endpoint Control now delivers endpoint agent extensions and their per-environment settings to enrolled endpoints automatically, and supports larger agent packages.