macOS 27 Compatibility
Resolved a critical agent crash on macOS 27, ensuring stable operation and seamless compatibility for fleets running both Stealth and Revealed agent editions.
Earlier versions terminate immediately at startup on both Stealth and Revealed editions: the agent will not start, the computer shows as offline in the Dashboard, and all monitoring stops (no screen recording, activity tracking, behavior rules, or alerts). Reinstalling the old agent does not help.
Recommended Action:
Mac Agent 26.30 is required for macOS 27.
Update all Mac endpoints to Agent 26.30 before rolling out macOS 27 (MDM fleets: push the agent ahead of the OS upgrade). Machines already upgraded to macOS 27 can be restored by installing Agent 26.30.
Microsoft Copilot Web Monitoring
Added comprehensive AI usage (LLM) monitoring support for Microsoft Copilot Web (copilot.microsoft.com) across Enterprise, Commercial, and Personal accounts. The agent captures bidirectional prompt and response interactions as AI Usage events, while also tracking and archiving all uploaded and downloaded file attachments directly linked to their corresponding chat sessions. This provides complete visibility into generative AI adoption, supporting corporate usage-policy enforcement and Data Loss Prevention (DLP) efforts by recording every prompt, response, and file attachment for review, and forensic investigation.
How to Enable the Feature:
Select Copilot Web from your LLM monitoring settings. The results are displayed on the LLM BI Report.
Note: This feature is available on Teramind UAM and above.
Configurable File Monitoring Exclusions
Added two new configuration parameters to agent configuration file (agent.conf*) allowing administrators to exclude specific directories and process names from Endpoint Security (ES) file system tracking. This allows organizations to bypass high-frequency, noisy workflows, such as local build targets, developer dependencies, and IDE caches - substantially reducing CPU/disk I/O overhead and preventing false-positive alerts on developer machines.
Parameters:
filemonitor-exclude-paths: Defines a list of directory paths (with regex pattern support) that will be completely ignored by the Endpoint Security extension.filemonitor-exclude-apps: Defines a list of application process names whose file activity will be excluded from monitoring.
Example:
filemonitor-exclude-paths=Downloads/myfiles/
filemonitor-exclude-apps=Slack
*Agent Config File Location:
The agent.conf file is located in your Agent installation folder, for example:
Macintosh HD > usr > local > teramind > agent > etc
Hardened MITM Certificate Architecture
Overhauled the certificate and private key architecture used for HTTPS/TLS traffic inspection by encrypting the agent's private key and root certificate.
Note: This enhanced security workflow is activated only after installing the new root certificate via the updated MDM profile. The updated configuration profile and deployment instructions are available in the Mac Agent Remote Deployment Article.