Skip to main content

Windows Agent 25.48 (2025-12-16)

A
Written by Arick Disilva
Updated this week

Improved Compatibility with CrowdStrike and Other EDR Solutions

We have optimized the auto-update process to prevent false positives from CrowdStrike. Previously, the installer extracted bundle.exe to multiple directories, which occasionally triggered behavioral analysis flags for suspicious activity (specifically, suspected attempts to delete volume shadow copies).

Auto-updates now utilize a single, dedicated directory (c:\windows\SystemTemp\tmtemp) for all bundle files. This change eliminates unnecessary security alerts from EDR/AV software and ensures a smoother, uninterrupted update experience.

To ensure proper operation, you will need to update your EDR/AV exclusions. Please consult the Antivirus & EDR Configuration Guide for more information.

Did this answer your question?