Agent Version 5.25

We are excited to announce our latest build, "ThreatLocker 5.25". The new build brings many improvements and enhancements. The build is currently in beta, and we are inviting our MSP Partners to test it out on your internal systems. 

The improvements are listed in order below:-

1. Performance improvements. ThreatLocker has made major changes to our system's core so that we process core operating system files directly at the Kernel. This has reduced the memory footprint by about 70%, and CPU on some older or specific models of systems. 
2. ThreatLocker now directly integrates with Superfetch components of the operating system. The Superfetch component in Windows preloads executables in ram, that may be loaded in the future. This caused ThreatLocker to log the files as executed. This has been changed, so we do not log the entry if it was not executed. 
3. Changed the preload of data when browsing folders no to show a file as opened. In previous builds, if a user browsed a folder, it may log files as read using Windows Explorer, even if the file was not read. This was because, various shell extensions would read the metadata from the file, before it was read. This has not been changed, so it does show as read, unless it is actually copied or read using Windows Explorer. 
4. Added the ability to schedule policies at certain times of the day. In the application policy page, you can define what time of day applications can be executed. E.g., you may decide to block PowerShell out of office hours. 
5. Improved security around tamper protection. 
6. Added protection, surrounding js files, that are typically just web files that could call other applications to stop them outside of normal behavior. 
7. Added the username into Network traffic, so you can now see the username that connected to a network resource. 
8. Added support for override codes with an override policy, if you are unable to connect to the internet or the ThreatLocker APIs are not available. 
9. Other various stability to security fixes. 

If you wish to make use of 5.25, please perform the following steps. 

1. Log into the ThreatLocker Portal. 
2. Select the Computer Groups page. 
3. Select the group you wish to test on. 
4. Select the "Update ThreatLocker Version" 
5. Select 5.25
6. Wait for 2-3 minutes to give the agent chance to download the new build. 
7. Select the computers page. 
8. Select your computer, and select Restart Service. 
9. Your computer should check in with 5.25 within a few minutes.