Version 10.0.8 - Beta
5/15/2025
New Features & Improvements
- Added ability to customize both the home page and new tab page in Edge using the 'Configure Web Browser Settings' Configuration Manager policy
Bug Fixes
- Resolved an issue in which Tray branding failed when computer was changed from a Maintenance Mode back to Secured
- Resolved an issue in which multiple threads attempting to write to the apps db caused high disk usage on some machines
- Resolved an issue in which repeatedly attempting to add an Edge extension would sometimes result in the extension being added in a corrupted state that could then be repaired
- Resolved an issue where approving a Web Control approval request would not update policy configurations locally on an endpoint in a timely manner
Version 10.0.7
5/12/2025
New Features & Improvements
- Added additional file extensions to the default list of file extensions flagged as executables
Bug Fixes
- Resolved an issue with user-based browser extensions being removed due to the Web Control browser extension installation process by creating two new options, 'CreateBrowserWebControlExtensionPolicy' and 'RemoveBrowserWebControlExtensionPolicy' to control this behavior rather than allowing the extension install to happen automatically
- Resolved an issue in which the Blocked Items list in the ThreatLocker tray was timing out when attempting to load due to repetitive denies by adding logic to only update the time when the action is repeated
- Resolved an issue in which Web Control incorrectly blocked a private IP address with a web category
- Resolved an issue in which Web Control was incorrectly dependent on either Network Control or Ringfencing to be enabled before monitoring network activity
- Resolved an issue where uploaded files triggered from the Unified Audit were being compressed into a zip file
- Resolved an issue where application custom rules using only the filename in the created by process parameter were not matching properly
Version 10.0.6
4/30/2025
Bug Fixes
- Resolved an issue in which the Service was calling on public and private IP addresses too frequently, causing performance issues on ThreatLocker's servers
Version 10.0.5
4/23/2025
Bug Fixes
- Resolved a performance issue caused when an endpoint was connected to a VPN and was also using the Network Control or Web Control module
Version 10.0.4
4/14/2025
Bug Fixes
- Resolved an issue in which the tray was delayed in displaying an active Maintenance Mode
- Resolved an issue in which alerts were being delayed from populating on the MDR alerts board
- Resolved an issue in which multiple Restart agent actions were causing the service to be unable to restart
- Resolved an issue in which uninstalling ThreatLocker using the MSI was failing to remove all ThreatLocker files
Version 10.0.3
4/9/2025
Improvements
- Improved alert caching on Endpoint Detect policy processing to only generate one alert per policy when a condition is matched, based on the contents of the alert
Bug Fixes
- Resolved an issue with ThreatLocker files not being removed when uninstalling using the MSI installer
- Resolved an issue with Tray Notification settings made on the Default Deny policy not applying as expected
Version 10.0.2
3/31/2025
New Features & Improvements
- Added the ability to clear Web Control tag cache when Deploy policies is pressed
- Added the ability to mark out-of-date software as resolved
- Added the ability to wait until an application is closed before attempting to patch it
- Added the ability to communicate applications that self-patched to the portal
- Made improvements to patch policy scheduling
- Made improvements to how the Cloud Control product communicates IP addresses
Bug Fixes
- Resolved an issue in which applications missing updates were being duplicated after service was restarted
- Resolved issue in which the application request window would populate with missing categories if an existing elevation window was open when the deny was hit
- Resolved an issue in which a custom app policy was not being matched when an inactive built-in policy for the same app was present
- Resolved an issue in which Detect Previously Matched Policy condition was not being triggered
- Resolved an issue in which a domain name was incorrectly being parsed with a port number
- Resolved an issue in which Web Control policies were not being processed due to a Network Control permit policy
Version 10.0.1
03/27/2025
Improvements
- Improved the handling of checking the online status of the agent when using a proxy
Bug Fixes
- Resolved an issue in which ThreatLocker was incorrectly blocking the upgrade from Windows 10 to Windows 11
- Resolved an issue in which the certificate field was breaking when sent via json
- Resolved an issue where the ThreatLocker driver was unable to load properly while using Astrill VPN
- Resolved an issue in which the apps.db was unable to be vacuumed
- Resolved an issue in which Chromium extensions were being learned with the wrong name
- Resolved an issue in which the View Available Application link was incorrectly being displayed when the target machine had no available applications
Version 10.0
03/19/2025
New Features
- Added support for the new Web Control feature. For full details on this feature, visit the following article: Web Control Module | ThreatLocker Help Center
- Added the ability to report on out of date software and install patches
- Added a new Triggered Maintenance mode that can be selected in an Approval Request to hold the start of the Installation mode until the end user attempts to run the file a second time
Improvements
- Improved the agent to create and use databases for Tags when matching against policies
- Added support for handling new ThreatLocker Detect condition "Previous Matched Policy" and new action "Take No Action"
- Added support to handle if a Detect policy has Enable or Disable Web Control Policy as an action
- Added the "View Available Applications" link in the Request Access popup window if the User Store is enabled.
- Added additional security to Installation Mode to prevent files from executing from commonly misused locations such as cmd line tools, web browsers, and Windows Explorer
- Improved processing of mapped network drives on the driver side
- Improved the way IP addresses are stored and sent up on Heartbeat check in
Bug Fixes
- Resolved an issue in which the Configuration Manager policy Set administrator account password was incorrectly impacting domain controllers
- Resolved an issue in which network traffic was being intercepted without any Network Control policies set to restrict inbound network traffic
- Resolved an issue in which files were incorrectly being denied while in Installation mode
- Resolved an issue in which setting triggered installation was failing to start Installation mode
- Resolved an issue with specific DLL files not being flagged with the correct action type
- Resolved an issue in which some Network Control tags were not inserted into the tags db because they were tied to a policy with a null end date - impacted only old Network Control policies
- Resolved an issue in which LAPS was not working with the Elevation UAC
- Resolved an issue in which certificates were not being correctly displayed
- Resolved isolated BSOD issue
- Resolved an issue in which Power Users were incorrectly able to insert their credentials in the UAC and be granted Admin access
- Resolved an issue with DLL files not being flagged with the correct action type
- Resolved an issue in which msi files were failing to run from a mapped shared folder because the elevation UAC was not populating
- Resolved an issue in which renaming a Service to be the same as the ThreatLocker Driver caused a machine to be stuck in a restart agent loop
- Resolved an issue in which using an invalid ProxyURL was preventing a computer from receiving files from Threatlocker
- Resolved an issue in which domain names were being required when attempting to elevate an application
- Resolved an issue in which renamed executables were able to run without logging
- Resolved an issue in which the ThreatLocker Driver failed to start on Server 2008
For Windows 9.x Release Notes: Windows Agent Version 9.x Release Notes