Supports full dumps of Endpoint Activity Recorder (EAR) events and introduces actor-based process launch exclusions to reduce noise. Linux and Cross-Platform Support
Broadcom has signaled that SEP 14.x will enter extended support after 2027, with no major RU releases beyond 14.3 RU9 (projected late 2026). Organizations should begin evaluating cloud-native alternatives (Symantec EDR or third-party XDR) for 2028 planning. symantec endpoint protection 14.3 ru6
The Endpoint Detection & Response (EDR) component now captures specific "File Delete" and "Rename" operations. Supports full dumps of Endpoint Activity Recorder (EAR)