What’s New in GravityZone February 2025 (v 6.59)

Cyberthreats constantly evolve, and so does Bitdefender GravityZone, our comprehensive cybersecurity platform that provides prevention, protection, detection, and response capabilities for organizations of all sizes. We recently rolled out several new feature to ease the workload of security analysts, administrators, and users in a way that is consistent with our multi-layered security strategy.

New for Security Analysts

Security analysts are responsible for uncovering the signs of cyberattacks, making the invisible, visible. New GravityZone functionality will elevate analyst capabilities through enhanced tools for threat detection, investigation, and response.

Risk Analytics with DORA Compliance Report

One new feature is compliance functionality for risk analytics, which is available in the Bitdefender Early Access Program (EAP). These compliance reports and frameworks enable you to proactively identify and mitigate security risks, reducing the likelihood of data breaches, while also helping you prepare for compliance audits. You can identify compliance gaps and determine where you should focus your efforts. You can learn more about the compliance functionality and how to join the EAP program, here.

With the latest update, a new compliance report is now available for the risk analytics feature: the Digital Operational Resilience Act (DORA). Access the endpoint focused report from the Risk Management section on the Compliance page.

XDR Enhancements

XDR (Extended Detection and Response) goes beyond EDR by collecting data from a wider range of sensors.

The latest update optimizes data collection (event retrieval) in the Azure AD Sensor. We accomplished this through the addition of Azure Event Hubs integration to the existing Microsoft Graph API. This change creates faster event visibility for the sensor and enables quicker recognition of sign-in activities and configurations, providing valuable insights into user authentication methods and potential security risks within the Azure AD environment. You can enable this enhancement through configuration steps which are described in the Bitdefender Support Center, here.

We also enhanced the custom exclusion rules by adding new criteria compatible with Atlassian Sensor detection and registry criteria. Additionally, you can automatically create custom exclusion rules when viewing XDR alert information. All criteria in the Exclusion Rule Definition tab are now shown in technology order.

New for GravityZone Administrators

Administrators constantly juggle tasks and responsibilities. Let’s explore the new GravityZone functionality designed to simplify the management of features related to prevention, protection, and detection in a defense-in-depth security architecture.

Enhanced Early Access Program (EAP) Network Capabilities

The new Network section, introduced in the August 2024 edition of our EAP program, has been enhanced with additional actions in this release. These new actions extend beyond standard network configuration, providing functionalities not previously available within the existing Network section.

New actions have been added to the new Network section: Suspend endpoint protection and Resume endpoint protection.

You can suspend protection based on predefined intervals and select specific modules to suspend. These actions enable you to manage endpoint security efficiently while maintaining full control over the suspension process.

The newly added actions are compatible only with Windows and require agent version 7.9.20 or later.

Additionally, we have added new actions to the Network menu related to AD Integrator. Now, you have the possibility to Set as AD Integrator, Remove AD Integrator, and Remove AD Integration. The integration allows GravityZone to import the computer inventory from Active Directory on-premises, and the integration is performed through a managed endpoint called Active Directory Integrator. We also added new filtering options for AD Integrator and AD Integration, which makes it easier to find relevant entities.

Anti-Tampering Detection Visibility

Anti-Tampering is a security feature in endpoint protection that safeguards the software itself from being disabled or altered by attackers.

In the latest release, we’ve made Anti-Tampering detections available in Threats Xplorer. You can view security events related to Callback Evasion and Vulnerable Drivers technology and filter them by module, technology, or threat type.

Path Blocklist Enhancements

The Blocklist feature allows you to manage and control access to files via hash and path and to block network connections identified as potential threats during incident investigations.

Now, Application Path Blocklist support is possible cross-platform, removing the .exe extension requirement and ensuring compatibility with Windows, macOS and Linux file path structures.

New for Users

Each IT system should enable daily tasks without disruptions and also assist users in overcoming security challenges.

Concurrent Logins

In the latest release, the Disable concurrent logins option is now available when editing or creating GravityZone accounts. When the option is disabled for an account, its user can log in to the GravityZone console from multiple browser sessions. However, if enabled, any existing session will be terminated, and the user will automatically be logged out of the prior session when a new session is started.

Summary

The Bitdefender GravityZone platform is a one-stop solution for all your organization's security needs.

To learn more about Bitdefender GravityZone, contact us or a Bitdefender partner for more information. You can also start a free trial by requesting a demo here.