Skip to main content

Release 783 (2025-11-25)

A
Written by Arick Disilva
Updated this week

This release contains the following component versions:

  • Windows Agent 25.41

  • Mac Agent 25.43

  • Web 25.46.3

  • Server 25.45.2

  • BI 25.45

New Features

New Feature Announcement: LLM BI Report

Component: Web / Dashboard

We are excited to announce the release of a new LLM (Large Language Model) report, which offers detailed visibility into your users' interactions with LLM chat agents, such as ChatGPT. You can find this new report under BI Reports > LLM.

This report is designed to help you monitor and understand how your team utilizes AI/LLM tools by allowing you to:

  • View key details, including the direction of the interaction (user's input/prompt vs. AI agent's response), chat title, the specific LLM model used, the full message content, and any attached files uploaded by the user.

  • Access the full context of any conversation by right-clicking on a row and selecting the View conversation option.

  • Download attachments using the Download attachments option.

Enabling LLM Monitoring:

To begin tracking, enable LLM monitoring within your monitoring profile(s) and specify the LLM applications you wish to track.

Current Limitations:

  • Only ChatGPT Web is currently supported for tracking.

  • The system tracks only uploaded files at this time; file downloads are not captured.

  • Some data points, such as audio input or prompts embedded within images, are not captured.

Support for Windows on ARM

Component: Windows Agent / Web

We're excited to announce support for Windows on ARM with a new Windows Agent ARM64, allowing you to monitor even more of the latest devices.

We've also updated the Agent Download screen to simplify the deployment process and incorporate the new Windows on ARM Agent.

Ability to Detect File Uploads to AI Agents

Component: Windows Agent

Our Files Content Sharing rule now identifies file uploads to popular AI platforms like ChatGPT and Claude, ensuring you have visibility into sensitive data shared with these services.

Support for the New Yahoo Mail

Component: Windows Agent

The Agent now fully supports the new Yahoo Mail web interface. This ensures reliable capture of all outgoing and incoming email activities and attachments, adapting to Yahoo's updated protocol.

[Mac] Emails Monitoring Support for Gmail

Component: Mac Agent

We are excited to announce Gmail (web) email monitoring capabilities for Mac. This update brings the Mac Agent in line with our Windows Agent, ensuring a consistent and robust monitoring experience across platforms.

Feature Highlights:

  • Comprehensive Tracking: Both outgoing and incoming are captured with essential details such as sender, email subject, recipients (including CC and BCC participants), email body, and attachments. You can view the report under BI Reports > Emails.

  • Monitoring Setting and Privacy Controls: All Emails monitoring settings are supported (with the exception of the "IGNORE EVENTS EVEN IF BEHAVIOR POLICIES MATCH" option).

  • Async Processing: Emails are processed and uploaded asynchronously for optimal performance.

You will need to enable the Network Monitoring Permission and turn on Emails and Network monitoring from the monitoring profile for this feature to work.

[Mac] New Mobileconfig Profile to Suppress Background Process Notifications

Component: Mac Agent

A new mobileconfig profile is available for macOS deployments to suppress intrusive background process notifications during Agent installation. This provides a smoother, less intrusive installation experience, adhering to Apple MDM standards for enterprise deployment.

Instructions for downloading and applying mobileconfig profiles via Jamf are available in this article.

[Mac] Support for Single Mobile Config in Intune

Component: Mac Agent

Instead of managing multiple mobileconfig files (configuration profiles), you now only need a single file that includes all necessary permissions. This simplifies setup and saves you valuable time.

The mobileconfig file and the deployment instructions are available on request.

[Mac] New Configuration Parameter to Specify Screen Capture Method

Component: Mac Agent

A new configuration parameter, screencapture-method, can be added to the Agent configuration file, allowing you to easily adjust the screen capture method if you encounter any issues with screen recording or live view in the Session Player.

The parameter accepts four values:

0

Use default method

1

Use screen capture utility

2

Use the new API

3

Use the old API (for Macs with macOS older than 15)

For example:

sceencapture-method = 1

For more information about Agent parameters, check out this article.

Improvements

Enhanced Activity Tracking in RDP Sessions

Component: Windows Agent

User activity is now accurately reflected for Remote Desktop (RDP) sessions. When "RECORD LOCKED SESSION" is enabled in Screen monitoring settings, the system continuously updates current activity, even when RDP sessions are minimized and restored, ensuring consistent user engagement data.

Accurate Webpages Tracking When Switching URLs

Component: Windows Agent

The Agent now promptly updates current activity when a user switches from a monitored URL to an unmonitored URL (a webpage where Teramind Proxy Certificate isn’t injected) or empty browser page/tab. This provides more reliable web activity reporting, even when URLs are excluded from monitoring.

Improved Outlook Email Parsing

Component: Windows Agent

The Agent now preserves line breaks and formatting when capturing Outlook HTML emails, ensuring messages are displayed close to its original format, addressing previous issues where emails appeared as a single line of text.

Improved US ZIP Code Detection

Component: Windows Agent

This release refines the detection of US ZIP codes and addresses by updating the ZIP code database to the latest version and optimizing the pattern identification logic for Predefined Classified Data.

The change eliminates false positives from invalid numbers (such as years in timestamps), improves accuracy, and enhances performance for Content Sharing rules.

Improved Live Screen Scaling in High Color Mode

Component: Windows Agent

We've updated the screen encoding method for live video playback in the Session Player. Previously, video could appear corrupted in HIGH COLOR mode when LIVE SCREEN SCALING was not set to 100%. This update ensures clear and accurate video at all scaling settings.

Smarter Screen Recording for High Resolution Displays

Component: Windows Agent

We've optimized how the Agent handles screen recording on high-resolution displays. Now, when your Windows display scaling is above 100%, the Agent automatically adjusts recording size. This reduces network bandwidth usage (especially on 4K and high-DPI monitors) and storage requirements without impacting image readability or OCR.

Enhanced Search Tracking in Firefox

Component: Windows Agent

We’ve updated the detection logic so that DuckDuckGo searches entered in the Firefox URL bar will now be detected, in addition to phrases entered on the search page.

Improved Reliability for Revealed Agent Startup

Component: Windows Agent

We’ve resolved an issue where the Revealed Agent could crash with an error code 109 on Windows 11 systems using non-Latin characters in usernames or system language. The Agent should now start reliably for all users.

Improved Destination Tracking in Teams Business

Component: Windows Agent

We've improved the Agent's ability to track Microsoft Teams (Business) activity. The
“Destination” field in the Instant Message BI report now accurately displays chat recipients, making it easier to trace and analyze IM communications.

Recipient information will now be displayed in the following ways:

  • For one-on-one chats: The recipient's name is displayed. For example, “John Doe”.

  • For named group or calendar meeting chats: The chat topic is shown. For example, “Sales Group Call”

  • For unnamed group chats: A comma-separated list of all participants is provided. For example, “John Doe, Rick, Adam Smith”

Enhanced Dynamic Blackout

Component: Windows Agent

The Dynamic Blackout feature now provides even stronger privacy for sensitive information through two key improvements:

Expanded Coverage

Dynamic Blackout feature now offers more robust protection for sensitive information. It now masks content in special situations, such as when you open browser's Site Information > Certificate Viewer or Dev Tools. This ensures that even these less common scenarios are covered, preventing accidental exposure of confidential data.

Masking Background Windows

The Dynamic Blackout feature now correctly masks content in windows that are not actively in focus (e.g., when a page loads in the background). This prevents inadvertent exposure of sensitive content, giving you peace of mind.

Improved Browser Plugins Detection in Firefox

Component: Windows Agent

We've improved the detection of Firefox browser plugins, specifically addressing those with non-string or special characters in their add-on profiles. This ensures the Agent operates more smoothly and reliably, preventing unexpected results and crashes, and providing a more stable monitoring experience.

Improved Dropbox Support in Files Rule

Component: Windows Agent

The Files rule (both Activity and Content Sharing) now fully supports the new Dropbox API, ensuring the triggering of all rule criteria, including File Operation, File Size, Upload URL, etc.

Improved Invitation Resend for New Employees

Component: Web / Dashboard

We've resolved an issue to ensure that the RESEND INVITATION button in an employee’s profile correctly sends invitation emails. Previously, users who had never logged in did not receive the email.

Now, clicking the button will correctly send an email containing a new password and all necessary installer download links.

Enhanced Object Searching in Monitoring Profiles

Component: Web / Dashboard

We have enhanced the search functionality within the Who to Track window (accessed via the EDIT OBJECTS TO TRACK button in Monitoring Profiles).

Search results are now prioritized and filtered to display the most relevant items at the top. This enhancement resolves previous issues with inaccurate or irrelevant matches, providing you with better, more reliable results.

Shared List Import Restored

Component: Web / Dashboard

You can now import shared lists using .txt or .csv files without encountering the “Wrong request parameters: items” error. The system now accepts either file uploads or manual entries as expected, making list imports easier and more reliable.

Improved Mobile Responsiveness

Component: Web / Dashboard

The UI on the My account screen has been updated to be more responsive. SUPPORT PIN and SERVER & PORT tabs now display correctly on mobile devices and narrow screens.

Improved Email Search Accuracy on Employees Page

Component: Web / Dashboard

The search functionality on the List of employees screen has been enhanced to provide more accurate results when searching by email address. This resolves previous issues where email searches (e.g., "[email protected]") could return irrelevant or partially matched results.

ARM Links Added to the Agent Download Emails

Component: Web / Dashboard

Emails generated by the "Send email instructions to me" and "Invite users" options on the Download Agent screen have been updated to include the Windows ARM64 installer download link. This enhancement simplifies the onboarding process for users with ARM-based devices.

Accurate Display of Special Characters in Daily Digest Emails

Component: Web / Dashboard

Daily Digest/Snapshot emails now correctly display all special characters in usernames, such as accented letters and non-ASCII symbols. This enhancement ensures names like "Kürklü" appear in full, preserving their original spelling.

The update was achieved by improving the email encoding configuration, benefiting all email types sent from the Web Dashboard, including password resets and invitations.

Improved PDF Rendering

Component: Web / Dashboard

We’ve resolved an issue where PDF files were not viewable in the Printing BI report (when selecting the View Document option from the grid widget’s context menu). PDF documents can now be previewed clearly as expected.

Improved Detection of IM Authors in MS Teams

Component: Web / Dashboard

We have resolved an issue in the Instance Messages BI report where the message author (message Source) was sometimes displayed incorrectly in the Conversation window, particularly for MS Teams messages. The report now accurately attributes every message to the correct author, ensuring higher reliability for your audits and reviews.

[Mac] Improved Permissions Management

Component: Mac Agent

We have addressed the issue of an unexpected system popup appearing due to third-party updating the permissions. This popup was prompting to grant audio and screen recording permissions.

[Mac] Clear Guidance for NetApp Extension Activation

Component: Mac Agent

The Agent now displays a helpful message with instructions if the NetApp extension activation step is missed during installation. This ensures users receive clear next steps when manual activation is needed, improving the installation experience and reducing confusion related to macOS error 1712 (timeout issue).

[Mac] Improved Task Synchronization for Revealed Agent

Component: Mac Agent

This update resolves an issue where closed tasks on the dashboard could continue running on the Revealed Agent, leading to inaccurate time tracking. Now, when a task is archived or closed on the dashboard, the Agent will automatically stop tracking the task and notify the user with a popup. This ensures that the Agent’s task list stays in sync with the dashboard, preventing continued work on closed items and improving overall accuracy for users.

[Mac] Support for the Latest Chromium-Based Browsers

Component: Mac Agent

We've enhanced the Agent's detection logic to adapt to recent changes in the accessibility structure of Chromium-based browsers (Chrome, Brave, and Edge, version 139.0.7 and higher). This ensures that all visited URLs are accurately captured and reported in your dashboard. This update is small, backward compatible, and won't affect performance or stability. Existing users don't need to do anything. Your URL monitoring will automatically resume after the Agent is updated.

[Mac] Ability to Capture Slack Channel Names

Component: Mac Agent

The Agent can now capture the channel names in Slack, providing a more comprehensive view of communication activities and extending your monitoring capabilities to include specific Slack channel interactions.

[Mac] Improved Protocol Detection in the Latest Firefox

Component: Mac Agent

Due to a change in the latest Firefox versions where the HTTPS protocol is no longer explicitly shown in the address bar, the Agent was incorrectly logging secure website visits as HTTP in monitoring reports. This update resolves this by making the Agent default to HTTPS for URLs where the protocol is not explicitly stated, thereby ensuring more accurate and reliable reporting of website visits for modern websites.

[Mac] Improved Remote Troubleshooting

Component: Mac Agent

Agent logs are now sent every minute during a troubleshooting session, rather than only at the end. This provides more immediate insights, reducing wait times and accelerating problem resolution.

[Mac] Improved File System Monitoring Permission Detection

Component: Mac Agent

The Agent now correctly reports the status of File System Monitoring Permission even when its system extensions lack the Full Disk Access (FDA) permission in certain macOS installations. This ensures better transparency and easier identification of permission-related issues.

Other

Windows Agent

  • Improved SharePoint Support: We've improved SharePoint support, addressing a situation where downloading multiple files from SharePoint would fail if the network driver was enabled. Downloads now work smoothly even with the network driver active.

  • Improved Applications Tracking: We addressed a situation where Windows' failure to provide the process name for some applications resulted in missing that information in monitoring reports, thereby improving data quality and reliability.

  • Improved Content Sharing Rule Notifications: The notification process for 'Warn' and 'Block' actions within the Content Sharing rule has been updated. This addresses Gmail’s unique HTTP request mechanism. Gmail users will now receive a single, clear notification when such a rule is triggered, eliminating previous instances of duplicate notifications.

  • Automated Recovery of the Revealed Agent: The Revealed Agent now automatically restarts after a crash or unexpected termination. This ensures continuous monitoring, prevents loss of worktime data, and minimizes downtime for end-users.

  • Improved WhatsApp Web Monitoring: The Instant Messages monitoring logic has been updated to ensure WhatsApp Web instant messages are captured correctly even after a page reload. This restores full monitoring functionality for affected customers.

  • Updated Applications and Websites Monitoring: URLs are now consistently captured when Websites monitoring is enabled, even if Applications monitoring is disabled. This refinement ensures expected tracking behavior and eliminates previous gaps in web activity monitoring.

  • Improved Outlook Attachments Capture: Outgoing email attachments are now reliably captured even when emails are sent from previously saved drafts in new Outlook Desktop or Outlook Web, ensuring organizations can consistently track file sharing via emails for better security and compliance.

  • Reliable Mouse Activity Detection: We've updated the Agent to ensure accurate productivity rate calculations by addressing the rare OS misreports on mouse movements. This enhancement also includes improved thread safety and a robust recovery mechanism for more reliable monitoring.

  • Accurate Work Time Tracking in Offline Mode: We've improved how the Agent tracks work time. Previously, it sometimes miscalculated work time during locked sessions in offline mode. With this fix, the Agent now correctly respects the "RECORD LOCKED SESSIONS" setting in your Screen monitoring preferences, ensuring that work time is tracked accurately and consistently.

  • Smarter Email Content Sharing Rule: We've resolved an issue where identical emails (same subject, body, and addresses) were only triggering an Emails Content Sharing rule once in Outlook. Now, each email will be treated as a distinct event, providing a more comprehensive rule detection.

Mac Agent

  • Improved Activation of Network and File Monitoring Permissions: This update enhances the reliability of Network and File monitoring permissions activation on macOS 10.15 and above. The Agent now proactively manages system processes and provides robust fallback mechanisms, ensuring that required extensions are activated smoothly without manual intervention or reboots.

  • Improved Activity Monitoring Accuracy: Activity monitoring on Mac has been enhanced to address previous gaps during offline reporting, ensuring all user activities are accurately captured and reported.

  • Reliable Auto-Update: We’ve made some major improvements to the auto-update process, ensuring seamless updates and stability across all supported macOS environments. The Agent now proactively manages system resources to prevent issues related to long-term open file handles and pipe limits. Additionally, the process is refined to address installer command failures on certain devices, ensuring that updates complete successfully.

  • Cleaner Uninstall Process: The Agent uninstall process has been refined to no longer modify system files to remove geolocation permissions. This update resolves permission errors and aligns with macOS best practices, improving overall system stability and security.

  • Improved Monitoring Control for Revealed Agent: The Revealed Agent on Mac now correctly stops tracking when monitoring is disabled for a user or computer from the dashboard. The Agent will now disconnect promptly upon receiving the disable command, ensuring it ceases all monitoring activities as expected. This fix improves compliance with user-defined controls and enhances the reliability of monitoring policies.

  • Improved Memory Management: The Agent's memory management has been improved, significantly reducing its overall memory footprint and preventing potential memory leaks.

  • Improved Activity Tracking in Multi-User Environment: A previously identified behavior where the system incorrectly captured activity from background users on macOS during sleep mode has been corrected. This update ensures that the monitoring system now behaves as intended: no activity is captured for either the active user or users in the background while the computer is in a sleep state. This provides more accurate and reliable activity tracking in multi-user environments.

  • Improved Auto-Update Process (Revealed Agent): The Revealed Agent now automatically resumes its last active task after a restart caused by an update procedure, ensuring minimal disruption to your workflow.

Web

  • Support for the Latest Jira API: We’ve updated our Jira integration to support the new Jira API version 3. This ensures continued, reliable syncing of your Jira tasks and keeps our integration up to date with the latest standards from Atlassian.

  • Improved Queue Handling in SIEM Integrations: We've resolved a queue handling limitation in SIEM integration, resulting in a more stable and faster integration.

  • Improved BI Report Export: We've improved the export process for BI reports by routing large export requests to a dedicated export service. This change ensures reliable exports for reports with greater date ranges.

  • Improved BI Report Export with Filter: We've ensured that when you export the Instant Messages BI report with an "Employee" filter, the filter is now correctly applied, instead of showing data from all employees.

  • Improved Video Export: We've addressed an issue where inactive periods (e.g., offline recordings) previously caused the export to exceed the specified time range. This improvement ensures your video exports are precise and align with your desired timeframe.

  • Improved BI Report Filters: We've addressed an issue where applying a report-level filter in BI reports did not update the displayed data if a similar filter had previously been used and removed at the widget level. Now, report-level filters work as expected, ensuring accurate data is shown every time.

  • Updated Permissions for Report Downloads: We've resolved an issue where non-admin employees could not access scheduled exported BI reports via email links (“Action is forbidden” error). All authorized employees can now successfully download their scheduled reports from the provided email links.

  • Improved BI Reports Rendering: In rare situations, some Keystrokes-based rules would cause the grid widgets in Behavior Alerts report to fail. This is now resolved, ensuring consistent data display.

  • UI Improvement: Several UI issues were addressed:

    • Pagination - Resolved an issue where pagination did not work on the Behavior > Alerts report. Users can now navigate through multiple pages of alerts as expected.

    • Tooltips - Fixed alignment of the tooltip in the Export Schedule modal window. The time and tooltip icon are now properly centered for improved usability.

  • Better Multilingual Support: Enhanced support for Cyrillic and non-Latin languages preventing challenges with login, password reset, and Behavior Rule/Policy exports.

  • Empty Host Name: Allows empty values for Settings > Security > Hostname in case you need to remove your hostname.

  • Feature Availability in Rules: Updated the list of activities on the Rule Editor's General tab to accurately reflect license restrictions.

  • Clean Up After Upload: Addressed automatic cleanup of temporary upload files upon network connection abort.

  • Improved BI Report Export: Scheduled report exports are now more reliable, preventing failures caused by record limits. This means you can access the full data you need for your business intelligence without interruption.

  • Improved API Endpoint for Behavior Policy: The API endpoint GET /tm-api/behavior-policy has been refined to provide cleaner, more relevant data. It no longer returns deleted policies and rules, ensuring that your integrations receive only active and accurate information.

BI

  • Improved Active Directory Agent Sync: We've improved the Active Directory (AD) synchronization process by making it more user-friendly for on-premises customers. Before the improvement, for the newly created users in AD, admin of the Dashboard had to manually enable monitoring for these users once AD sync was done for them. Now this happens automatically.

  • Improved Process Name Detection: We've resolves an issue where the process name for a custom application generating a pop-up was not properly recorded. The executable is now correctly and consistently displayed across all reports.

  • Improved Rule Targets: We've addressed a situation where rules might not trigger correctly when computers were selected as targets in the User tab of the Rule Editor, particularly for users logging into multiple computers.

  • Improved Filtering by Group: We've resolved an issue where grouping BI reports by "Day of the Week" could show missing or incorrect activity data for some dates. Reports now accurately display activity and input rates when grouped by day of the week, ensuring reliable weekly productivity insights.

  • Improved Filtering by Email Domains: We fixed an issue where BI report filters did not always exclude email domains correctly if there were extra spaces in the addresses. The system now removes spaces from email domains, so filters work as expected.

Did this answer your question?