Countercept Agent for Linux – 2026-05-18 Update

The update is related to the Countercept Agent’s Response Engine (RE) Common Response Actions Module (CRAM) components. The Response Engine and Common Response Actions Module components of the Countercept Agent enable the Detection and Response Team to retrieve artefacts for analysis or contain any identified threats within the environment. 

Product Name: Countercept Agent for Linux – CRAM and RE

Version:

• Response Engine 3.3.3
• CRAM 1.26.137

Pilot Availability: 19/05/2026

General Availability: 26/05/2026

Predecessor:

• Response Engine 3.3.3
• CRAM 1.24.112

Release Purpose:

• Generic Maintenance

Customer Action Required

• N/A

Name Changes:

• No changes to process, or service names.

Files Updated:

• Numerous files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Bug fixes and general maintenance

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15 SP1 – SP3
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent might break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported operating system versions, or switching clients to managed updates in collaboration with the WithSecure Engagement team.