Prefer to Read Offline?
1. What’s New?
We are thrilled to unveil the latest updates to the MetaDefender Endpoint Security SDK this month. Get ready to supercharge your endpoint protection solutions with expanded support for more products and some new, exciting features. Build stronger defenses with advanced capabilities that integrate seamlessly into your projects. Prepare for an epic upgrade that'll take your security to the next level.
1.1 New label for EDR/XDR products
NEW FEATURE, SCHEMA CHANGE, CODE CHANGE
We have added a new category for our customers to provide policy enforcement based on EDR+XDR products running on the endpoint (ex: SentinelOne, CrowdStrike, MD). Currently, both standard Antivirus and EDR products are categorized under Antimalware.
We have assigned a new label, "edrxdr," to identify EDR products, allowing for easier identification of EDR and XDR products.
Some notes:
- EDR+XDR products will continue to be appropriately categorized in their current categories (Antimalware, etc.).
- The new edrxdr label is an addition to the current product categorization.
- The new label is not a new category but is found in the “labels” hive of the product’s info that is returned from the various SDK APIs.
2. Upcoming Changes
2.1 Non-security Microsoft patch support
NEW FEATURE, SCHEMA CHANGE, CODE CHANGE
In the May release, the SDK will be able to detect and install Microsoft non-security patches.
Currently, the Microsoft categories supported by the SDK are Security Updates, Service Packs, and Update Rollups.
The Microsoft categories we will be adding are Regular Updates and Critical Updates.
*You will need to make a code change to implement this feature, including a new datafile to distribute to the endpoints. Please contact the OPSWAT team to assist with this*
2.2 Realtime monitoring on macOS
NEW FEATURE, MAC, ENGINE UPDATE NEEDED, CODE CHANGE
This summer, the SDK will provide Real-time monitoring on Mac operating systems. Unlike the current compliance checks, which are on-demand audits, real-time monitoring is dynamic, adapting to live events and rule changes as they occur.
*You will need to make a code change to implement this feature. Please contact the OPSWAT team to assist with this*
2.3 V3V4 Adapter to use libc++ instead of libstdc++
ENHANCEMENT, MAC, LIBRARY UPDATE
Soon, all Mac V3V4 Adapter libraries will be built via libc++ instead of libstdc++. This shift will bring better support for modern C++ standards, faster compilation, and better optimizations.
You will need to change your compile process for the macOS to add support for the libc++ library.
3. Required Actions
3.1 We moved the OesisPackageLinks.xml behind the VCR gateway
SECURITY UPDATE, VCR GATEWAY
Starting December 31st, 2024, the OesisPackageLinks.xml file are relocated behind the VCR Gateway for enhanced security, replacing its currently public location.
Since September 1st, 2024, the file can be accessed via the VCR Gateway. You can download the file by following these steps: copy and paste this URL vcr.opswat.com/gw/file/download/OesisPackageLinks.xml?type=1&token=<authorization_token> into your browser and replace <authorization_token> with your unique token. If you don't have a unique token, please contact support.
This update ensures continued and secure access, and users should update their systems to accommodate this change before the December 31st deadline.
3.2 End of Support for AppRemover package with the old engine on macOS
END OF SUPPORT, MAC
As we have refactored the AppRemover module on macOS to provide a more optimized and streamlined experience, two packages of the AppRemover module on macOS are being maintained on the My OPSWAT Portal: AppRemover OSX and AppRemover OSX V2.
Starting January 1, 2026, the OSX package will be removed. We recommend upgrading to AppRemover OSX V2 to ensure your system receives all new updates and comprehensive technical support for the AppRemover module.
3.3 End of Support for Windows 7 & Windows 8
END OF SUPPORT, Windows
Starting January 1, 2026, support for Windows 7 and Windows 8 (server versions included) will be removed from the SDK. To ensure security, compatibility, and optimal performance with MDES SDK, we recommend upgrading endpoints to a supported Microsoft operating system.
4. Detailed SDK Information
This is just the tip of the iceberg! You can view all the supported applications on our support charts:
5. Contact
Are you a customer and have questions about this list? Please contact our trusted support team at opswat-support@opswat.com.
Interested in learning more about how OEMs use OPSWAT to strengthen security at scale? Let’s talk! Contact us at oem@opswat.com
