Huntress Agent Version 0.12.28 Release Notes

Team: Huntress EDR
Product: Huntress Agent
Summary: Update on host memory usage, scheduled task remediations, and the addition of the ability to remove files after reboot if deletions fails due to open file handling.

Previous publicly released version: 0.12.26

Rollout start date: 9/3/21

Bug-Fixes

• Temporarily stopped sending back information on local firewall rules to prevent excessive host memory usage

  • After the deploy of 0.12.26, some servers with over 10,000 firewall rules began to see high memory usage from the Huntress Agent due to a memory leak. A more permanent fix will be included in the next agent release.

• Scheduled task remediations now succeed if the scheduled task was already deleted

  • If the scheduled task is not present for a given remediation then the attempt to remediate is now reported as success. This prevents the associated Assisted Remediation tasks from hanging indefinitely.

New Functionality

• The agent can now mark files for deletion after reboot if deletion fails due to an open file handle

  • This will help ensure file remediation succeeds in cases where a malware process is still running and preventing removal of the file. This will be paired in the future with host reboot Assisted Remediation tasks for Managed Antivirus incidents to ensure malware has been cleaned as recommended by Windows Defender.