It introduces these main features: new Port-Protection blade, support for the Security Assertion Markup Language (SAML) protocol in user authentications, support for Smart Cards for user authentication.
Users can now execute PowerShell scripts on client computers using Push operations, Static Detection Engines have moved to monitor the access to the file and not only the creation of the file, Behavioral Guard has a new active behavioral security technology and Media Encryption events are now sent to Threat Hunting.