Applies to Veriato Cerebral
Mac Agent Release 23R01
Agent Version 10.0.10771
January 16, 2024
Article No: 1500004535401
A new Mac Agent version includes previous upgrades and automatically appears in the Add Agents options and the Agent Versions section of the Management Console. We recommend installing the new version on a test device before deploying to all Mac endpoints.
IMPORTANT: Requires the Cerebral Server update Veriato Cerebral Build 9.3.1.1456 for Sonoma support.
Recording Updates
- Mac OS Support – Records and delivers activity from Mac OS 14 Sonoma, 13 Ventura, and 12 Monterey devices (with the Intel or Apple M1 or M2 chip).
- iMessage Chat – Captures Inbound and outbound iMessages on Sonoma and Ventura devices.
- Microsoft Teams Chat – Captures messages in Teams desktop clients on Sonoma and Ventura.
Enhancements
- User Registration, Multi-User Support – Each Mac user is registered and receives a valid User ID once. The agent supports recording and uploading data for multiple users with remote access to a Mac. New users of a device are created and registered, and data recorded for a user deleted from the endpoint persists and is uploaded to the server.
- Safari Browser – The improved Safari browser extension respects recording policy settings, returns tab IDs for more accurate screenshots, does not require a reboot following the extension installation, and records events reliably when granted Full Disk Access permission.
Improvements
- Installation – The Mac Agent can be manually installed without server communication. The agent automatically reboots as requested in the recording policy following installation, creating a new device for the server. Additional code signing and component notarization prevent warnings following installation.
- Uninstall – An Uninstaller to run at the endpoint is available on request from Veriato Support.
- Login Events – The Mac “LoginWindow” is no longer captured as an application event.
- On Log-out or Shutdown – All events recorded except Document Tracking, Screenshots, and binary file events are logged immediately, sent to the server, and appear in the “Message sent to server” internal log.
- Device Name Change – A change to an endpoint device name is managed by the server and does not interrupt data capture.
- Active Time – Any application used for more than 3 minutes will have recorded active time. Application activity is flushed on a change of focus.
- Application Events – Application and file field values are properly handled and delivered to the server efficiently.
- Recording Policy Updates – Updates to a recording profile are communicated and implemented successfully at the endpoint.
- Screenshots –Continuous screenshots are captured according to recording policy settings. Screenshot settings will not interfere with the user’s session or cause a message to appear. Blank screenshots will not appear if screenshots have been disabled in the recording policy.
- Document Tracking – Lists of drives to capture (or not capture) agree with Mac system path formats.
- Behavioral Analytics - Document Tracking BA events are handled as expected.
Updated: 06/07/2024