Elevate24 2.5.0 Beta 2

Pre-release beta — not recommended for production. Please feedback anything you find.

⚠️ Certificate Update: This installer is signed with an updated certificate: Jigsaw Systems Ltd (563MYW3H73).

New Features

CLI Elevation

Elevate24 is now available via command-line, this feature allows users to request privilege elevation directly from the terminal. This is most useful for SSH sessions, automation, and scripted workflows where the GUI isn't practical. This is only available for primary account elevation and is not support on secondary account elevation.

• -e elevate
• -t session duration
• -r elevation reason
• Apple authentication supported
• CLI elevations appear in the Elevate24 UI in real time
• Can be enabled via the new AllowCliElevation Boolean key.

Example

elevate24 -e -t 60 -r "App Install"

Blocked Event Notifications

Introducing real-time notifications when a security policy blocks an action (process execution, file operations, process signals).

• New Blocked Events History view in Settings
• Event detail view with full event information
• Hide the view with HideBlockedEventHistory

Disable User Elevation Mode

New DisableUserElevation key prevents users from self-elevating while keeping the app and session monitoring active. Useful for monitoring-only deployments, or for toggling elevation on/off via MDM Self Service without uninstalling.

Improvements

• Microsoft Sentinel: Timestamps now use ISO 8601 UTC with en_US_POSIX locale, matching Sentinel's expected format. New SentinelLogToFile key writes payloads to /tmp/Elevate24/SentinelUploads/ for debugging.
• Event Processing: Username filtering now supported on process execution rules.
• UI: Improved window height handling when toggling settings.

New Configuration Keys