Datto EDR legacy release notes

ALERT  LEGACY ARTICLE: The content in this article is no longer updated and is available for reference purposes only. Features and workflows described may be deprecated, significantly changed, or no longer supported.

Environment

  • Datto EDR

Description

This article enumerates all release notes from February 8, 2022 to October 17, 2022. For current release notes, refer to Release notes.

Index

Releases

Release 10-17-2022 Version 6127

Changes

  • Worker: Bothan sqs queue url should be shared across all regions
  • UI: Agent list should display the count of matched agents
  • Worker: Add additional alert metadata to correlation submission

Artifacts

agent.linux32.dead9dde073082c3a8afee21b21456edba142af08bbf11953014fda00f983a2d.exe.gz
agent.linux64.7782f6118ecf85b8ffa88e558a7573dc50ae1675e2422fa8f710dec439cecdb5.exe.gz

agent.macos.a1600156c03aaf40ce38e8e9c2be35848ab0c00e156ef3954bad05c64b5a520e.exe.gz

agent.windows32.d7ace1176459a014c26b7c90cf2db67cf27dd053b09e8a58031efe94115f0210.exe.gz

agent.windows64.4631903088166cbd0e5396cdd3831791f08baedda48ae7a71ca2d57d7aecbba9.exe.gz

controller.windows64.4b19f4b0c51482afa85aae82ee120e915addd10eb7f8c207c0a90e71c7ccb6bc.exe.gz

controller_installer.windows64.be312c1be3a35ce9d4bbc11fae66392aedbe68e521c331dbd76d66adae8767d8.exe.gz

integrator.windows64.c79db0fb12b5068e1180bf59c0d9646fc40cc88411b83c9e735c530e14a39dc5.exe.gz9

Release 10-3-2022 - Version 6079

Changes

  • UI: Add extensions to Search
  • UI: Compliance Feature flag
  • UI: Search UX - Minimum length and opt-in
  • UI: Migrate all virtual scrolling lists to infinite scroll UX
  • UI: Submit file for analysis should auto-refresh
  • UI/Worker: Remove AWS integration and Cloud Identity
  • UI/Worker: Correlation rule integration
  • Worker: Migrate app vulnerability submission to sqs from http
  • Worker: Maintenance window default should be region-aware
  • Agent: Parse defender alert behavior block

Fixes

  • UI: Negative score on file details
  • UI: File detail: Horizontal scroll bar disabled in code editor
  • UI: multiple analysis jobs can be created for the same item
  • UI: Multiple api requests when holding enter in text search
  • API: Server side error when entering "*" in text search
  • Agent: collecting blank processes
  • Agent: Some drivers missing full path
  • Agent: High memory usage with some extensions
  • Agent logging: survey status update for none

Components

API 4.3.2

  • Patch: See above

Agent 2.5.8

  • Patch: See above

Release 08-29-2022 - Version 5950

Changes

  • UI: Target Group overview page element positioning
  • Integrator: Add non-file alert types
  • Worker/DB: Move created_date column to host instance tables during load
  • UI: Search feature toggle
  • DB/DW: Federation queries - Hot data loader service
  • DB: Search indexes

Fixes

  • API: error status items should not be blacklisted using bulk blacklist
  • DB: Remove Fix search indexes in migration 205
  • UI: Refresh required to update address list after deleting item
  • UI: Regression - Alert inbox only displaying 25 alerts
  • UI: Regression - Type column data missing from hostscan history list
  • UI: Regression - Host scan history filters include flag and threat options

Components

Integrator 1.0.1081

  • PATCH - See above item

API 4.3.1

  • PATCH - See above item

Artifacts

agent.linux32.a73f329580bec9f8022531b3495e9e2679d6b4de22121b8aa352130a1d97785e.exe.gz

agent.linux64.865cc897a2dd3ce3554e0747e498df596b36e651e381245ce788a8bbc8ca5c4a.exe.gz

agent.macos.93b3579e9ebbba408824aa036a4f77ff12f1a35baf7fdb65e0202963aa965cde.exe.gz

agent.windows32.4a16fc9833ff181f49b53e090b8be297243d5075f27fd8bd678ff07911bf0645.exe.gz

agent.windows64.563e0c8236fa179512858163ac35799f45c69baceafdb4072e8ef4fe8e59f26c.exe.gz

controller.windows64.4b19f4b0c51482afa85aae82ee120e915addd10eb7f8c207c0a90e71c7ccb6bc.exe.gz

controller_installer.windows64.be312c1be3a35ce9d4bbc11fae66392aedbe68e521c331dbd76d66adae8767d8.exe.gz

integrator.windows64.c79db0fb12b5068e1180bf59c0d9646fc40cc88411b83c9e735c530e14a39dc5.exe.gz

Release 08-18-2022 - Version 5907

Changes

  • UI: Search
  • Worker: Make retention policy an env var
  • Worker: Re-enable application collection for RM tennants

Fixes

  • UI: Recommendation categories are out of order
  • UI: Alert list - Acknowledging alerts should refresh the list
  • UI: Alert details, user menu overlap
  • Agent: Mem inject details missing protection info
  • Agent: Hide error logs when Defender is not present

Components

Agent 2.5.5

  • PATCH: See above Agent items

Release 08-01-2022 - Version 5846

Changes

  • UI: Restore Intercom chat in console

Release 07-27-2022 - Version 5839

Changes

  • API/DB: multi-tenant application reputation management
  • UI: Alert - Immutable file metadata
  • UI: Alert detail - Display recommendations
  • Worker: Alert recommendations - Default

Fixes

  • UI: Clicking outside of add user modal closes it
  • UI: Rule author listed as Datto EDR of all users
  • UI: Add box modal dropdown menus overlap each other
  • UI: File Detail - View Strings dialog too small
  • API: Content security policy and multi-region tar uploads post-intercom

Component

API 4.3.0

  • MINOR: Added new route for application reputation management
    • POST /applications/[id]/repute?action=[action]
      • Valid action values: allow-list, block-list, delist
      • PUT /applications/[id] and the approved property are now obsolete
  • PATCH: Updated HTTP headers for content security policy after removing intercom

Release 07-18-2022 - Version 5799

Changes

  • Worker: AES alert recommendations - Rules
  • Worker: Remove elasticsearch survey data export
  • UI: Alert inbox new severity filter option
  • UI: Add more default file flags

Fixes

  • Worker: some exported CSVs have 1970 date
  • Worker: include tenant field in alert csv batch export
  • Worker: jccriverside - deadlock errors during load
  • Worker/SOC: sourceAuthor missing in alerts
  • Worker: Empty export data files during load backlogs
  • UI: Task timer on Task Menu Dropdown doesn't stop counting after task completes
  • UI: Secure tab, publish history takes a hot minute to show list
  • UI: Task cancelled but box refresh button running forever
  • UI: Blank screen after refreshing browser on scan heartbeat screen
  • UI: Submit for analysis button not highlighting on file details screen
  • UI: Threat Intelligence is empty in UI for all files types
  • API: no limit when pulling the csv data
  • API: Slowness in /api/agents/uploadUrl
  • API: Fetching S3 upload url sometimes fails
  • API: rule route gives null for severity
  • DB / API: Host and instance details are missing for memory objects
  • Agent: Service should restart after killing process
  • Agent: Agent stops and doesn't restart

Components

Agent 2.5.4

  • PATCH: See above Agent items

API 4.1.0

  • MINOR: Added /boxMemescanHosts
  • PATCH: See above API items

Release 06-22-2022 - Version 5735

Changes

  • API: RMM agents should be auto-approved
  • Worker: Remove agentService.js code used for agent_heartbeat_load migration
  • Worker: Remove AgentJobService.js code used during agent jobs migration
  • Worker: Batch export larger files to athena
  • Worker: Store nightly heartbeat agent metrics
  • Worker: All tenants should not share the same time for the daily diff scan
  • Worker: Add multi-region support to ECS tasks
  • Worker: Set description for non-rule alerts
  • DB: Remove obsolete table indexes

Fixes

  • API: query not producing results and running forever with "limit": 0 filter
  • UI: Alert detail page - failed files from rule alerts should not create a file detail link
  • UI: Compliance info modal closes when clicking anywhere outside of it
  • UI: Comment section text box gray instead of white
  • UI: Bulk alert acknowledge doesn’t refresh list automatically
  • UI: Acknowledging alerts doesn’t auto update the alerts list
  • UI: Agent status not changed to pending removal without manual screen refresh
  • UI: Scan button highlighted when no active hosts listed for target group
  • UI: Scan task summary progress doesn’t update automatically
  • UI: Scan task timeline view spinner doesn’t stop after scan is completed
  • Worker: File retrieve complete job hangs in created status
  • Worker: Box refresh during report generation results in failed report task
  • Worker: Scheduled scans of target groups with queries failing too early
  • Worker: moonbeam integration should use the RMM environment mapping
  • Worker: Error during survey data export
  • Worker: hostname should be escaped when loading data

Components

API 4.0.1

  • Passing a limit=0 filter will no longer bypass the 1000 result set limit

Release 06-07-2022 - Version 5675

Fixes

  • Agent: utilizing extremely high CPU space during, and after running a scan
  • Agent: Windows server 2008 machine scan get stuck at stages

Release 06-06-2022 - Version 5668

Changes

  • Worker: Extension sync - Official extensions are not automatically removed
  • DB & API: Split flag and local reputation columns apart from filerep
  • API & Agent: Ingest RMM device id during agent heartbeat and alert export
  • UI: Update package dependencies
  • UI: virtual scrolling should cache the count on first fetch and not per-page
  • UI: User menu updates &Intercom chat removal
  • UI: Strip out useMemo and DataTable from Rules

Fixes

  • Agent: mem file uploaded to hunt-saas-surveys bucket
  • Agent: failed files should not generate a filerep entry
  • UI: Analyze page - Reduce API calls for host list
  • UI: Extension result screen missing version and host ip address info
  • UI: Newly created reports don't display in report manager unless you refresh
  • UI: Refreshing a box should auto-load results when the task is completed
  • UI: File detail component consolidation and tab fix
  • UI: filereplocals route hit twice when accessing alert file details
  • UI: Admin page is slow to load
  • DB: Failed files blacklisted produce alerts with no hashes
  • Worker: Compliance scan - Incorrect DMARC check

Release 05-11-2022 - Version 5523

Changes

  • UI: Analyze page: remove API call to count scans
  • Worker: Timebox refresh job timeout
  • Worker: Increase default box object limit to 250K
  • Agent: Defender alerts
  • Agent: Detect and report RMM device ID in heartbeat
  • Agent: Add api and file upload/download retry counts to agent metrics during heartbeat

Fixes

  • UI: Extensions have Datto EDR as the author instead of the user.
  • UI: Log4shell extension alert is greyed out
  • Worker: Older scheduled scans are failing if extensions are not selected
  • Agent: rts process collection processes materialized in memory
  • Agent: Failed files shouild not generate a filerep entry
  • Agent: Windows 11 machines show up as Windows 10 machines
  • Integrator: Registration delay on new instance when other instances are already configured

Components

  • Agent 2.5.0

Release 04-16-2022 - Version 5476

Changes

  • UI: Alert list should be filtered for alerts by default
  • Worker: Application collection should be disabled for AES scans

Fixes

  • UI: Application advisories: between filter
  • UI: Dwell Time page fix
  • API: Canceling upload task from individual item screen produces 500 error
  • Worker: Scans continuing to cancel during the loading phase
  • Worker: Scan tasks show as completed when failed

Release 04-22-2022 - Version 5428

Changes

  • UI/Worker: Default extensions
  • UI/Worker: Apply filters to default sliding window timeboxes + max object validation
  • UI State Management - Reports
  • UI State Management - Alerts
  • UI State Management - Remove Redux
  • UI: Analysis switcher icons
  • UI: Signature Details Missing on object
  • NVD: vger upgrade to node 16
  • DB: Connection data should ingest processSha1 from survey
  • DB/API: Remove obsolete file variant tables and views
  • Worker: Survey Export to S3 - Athena partitioning
  • Worker: Alert export to S3
  • Worker: Completed tasks should be auto-archived sooner
  • Worker: Script auto-analysis bypass
  • Worker: AES tenant default configuration

Fixes

  • UI: Unable to add comment and assign flag for the memory object
  • UI: Respond button in the top right of Alert Details screen is unresponsive
  • UI: Cannot delete custom boxes created
  • UI: User cannot access site after logging in
  • Worker: box refresh job exceeding 15 min
  • UI: Filtering for "Unknown" scan status under Discover tab doesn't seem to be filtering out hosts whose scan status are unknown
  • UI: Scan tasks have too much data when extensions are added
  • UI: Target group list request too large when extensions included in scheduled scan options
  • UI: no info in UI when static analysis cannot be run on items
  • UI: Alert file links don't include name and path
  • DB: Duplicate entries on agent_heartbeat_load table
  • Agent: High mem usage
  • Agent: Missing filerep data in survey

Release 03-17-2022 - Version 5379

Changes

  • Expand boxObject to hold all object metadata needed for analysis views
  • Rule publish task add username data

Fixes

  • UI: Links to objects from the alert are not being created
  • UI: Target group schedule doesn't let user select specific days
  • UI: Task item list - userTaskItems api should have a fields filter
  • UI: Dwell time item links redirect to box None
  • UI: Dwell time alert list issue when flagging
  • UI: Respond button in the top right of Alert Details screen is unresponsive
  • Worker - hung enumerations
  • Worker: Task is still running in background after canceling
  • Worker: Scans are Canceled, last action: 'Status changed to loading'

Release 03-02-2022 - Version 5331

Changes

  • API: Automatic user access to partner managed instances
  • UI: Rules support for Mitre data
  • UI: State Management - Identities & Cloud Activities
  • UI: State Management - Confirm Dialog
  • UI: State Management - Toasts
  • UI: Remove link to infocyte.com on sign out page
  • DB: Schema cleanup 2022-02●Agent: Add cli arg that returns agent id

Fixes

  • Agent: Consolidate heartbeats to once per interval
  • API: Excess creation of agent RTS jobs
  • Worker: Unusual host count in the Dashboard of the instances
  • Worker: Retention policy failed on alerts step
  • UI: Add user - trim email
  • UI: Logs sent out when NetworkRequest errors are thrown on redirect in Firefox
  • Auth Cache: Groups missing _id prop

Release 02-22-2022 - Version 5286

Changes

  • Auth Cache: Optimize Redis cache lambda / write data in batches ('mset')
  • UI State Management - Admin - Integrations
  • UI State Management - Loading bar

Fixes

  • DB: Allowlistedlisted objects being shown as compromised/alert
  • API: 500 server error when applying filetype filter to dwell time list
  • API: 500 server error in /api/agents/progress
  • Worker: Target Group host count updates happen too often in queue
  • Worker: API tokens missing before their expiry
  • Worker: Auto-Provisioned Instances are not migrating users from Auth0
  • Worker: MS365 Compliance: Error during email parsing
  • Worker: backlog in alert-load-file queue
  • UI: Alert inbox, filtering by host gives unexpected results

Release 02-12-2022 - Version 5254

Changes

  • Extension import should include enabled and description from header
  • UI State Management updates:
    • UI State Management - License Agreement
    • UI State Management - Settings
    • UI State Management - Analysis

Fixes

  • Agent: Disable process hollowing
  • UI: Archiving all tasks while on a list view displays the bottom of the list
  • UI: Rules list, sorting by version column UI issue
  • API: Returning error 500 instead of error 400 in a couple of routes
  • API: Updating the agent-friendly name as an analyst automatically logs the user out of the application.

Release 02-08-2022 - Version 5230

Changes

  • API: Use memcache of user group memberships to prevent Auth0 api throttling
  • API/Worker: Node 16 upgrade
  • Worker/SOC: Rule author field in alert
  • Worker: Migrate back to standard queue from FIFO for rules
  • DB: Bobcat should no longer use temporary schemas
  • DB: Use entropy from agent
  • DB: Consolidate file signatures and package management into filerep
  • Auth0: Remove Community Edition sign up link from sign in page
  • Agent: Process Hollowing Detection
  • UI: Add datto.com accounts to same group as infocyte.com
  • UI: Tenant List/Page Sort
  • UI: Alert List: Consolidate "flag" field under "context" as a 6th box
  • UI: Host scan history list should not load states in analyze with scanId arg
  • UI: Replace soon to be obsolete sass calc() usage
  • UI: Task list feedback for license limit rejected-scans
  • UI: Show filter data for custom timeboxes
  • UI: Change search field on rules
  • UI: Archiving a task from the task summary list should not prompt the user for confirmation
  • UI: Add link to extension syntax docs from extension editor
  • UI State Management updates:
    • UI State Management - Analysis - File Rep
    • UI State Management - Analysis - Applications/Application Advisories
    • UI State Management - Roles
    • UI State Management - Profile - Notifications
    • UI State Management - Comments
    • UI State Management - Dashboard