This minor release strengthens Process Guardian with path and checksum-based verification, adds a new tool to catch stale monitoring policies before they become blind spots, and improves reliability of cross-domain monitoring. Read the full release notes.
Want the full details? Click the link below!
What’s Changed in Netwrix Threat Prevention 8.1
Smarter Process Guardian Protection
Process Guardian now identifies suspicious processes by more than just their name. It can verify the exact folder a process is running from and confirm the file itself hasn’t been tampered with (via checksum verification), closing off a common evasion technique where malware disguises itself under a trusted process name. It also adds stronger verification of legitimate Windows system processes, reducing the chance of a false block or a missed threat.
New Tool: Policy Health Checker
A new tool your admins can run against your own monitoring policies to flag any that reference a file location or Active Directory object that no longer exists, for example, after a server is decommissioned or a group is removed. This helps ensure your monitoring stays effective over time and surfaces silent gaps before they become a problem.
Bug Fixes and Miscellaneous Updates
-
More Reliable Monitoring Across Trusted Domains
Fixed an issue where slow or unreachable trusted domains could back up Netwrix Threat Prevention’s monitoring data collection, delaying or degrading coverage. Administrators can now exclude specific unreachable domains, keeping monitoring running smoothly and reliably -
Support for Exchange Server SE RTM SU10 (KB5121608 Sep26SU)
The updated agent builds are:- 8.1.0.34
- 8.0.0.90
- 7.5.0.319
To view the full list of bugs fixed since Version 8.0, see the complete changelog .
Plan your upgrade
Netwrix Threat Prevention 7.4 will reach its end of support life on March 17, 2026. For more info, visit the Supported Versions page.
Need help with this update?
There are many different ways to get help with our products!
| Situation | Action |
|---|---|
| If you feel the product is broken and not working as intended… | Contact Support |
| If you have a question you’d like to ask other experts… | Create a discussion in the community: Threat Prevention > Discussions & Questions |
| If you have a feature request… | Let our product team know directly: Threat Prevention > Ideas |
| If you have something cool to show… | Show everyone what you built: Threat Prevention > Show & Tell |
What are your thoughts?
We are always happy to hear from our users on what you like, and what you hope to see in the future. Please, share your thoughts below!