Skip to content

v0.4.2 - pySigma, Backend, and Langchain version updates!

Choose a tag to compare

View all tags
@slincoln-detections-ai slincoln-detections-ai released this 10 Oct 21:34
· 23 commits to master since this release
v0.4.2
b4c7c05
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SigmAIQ v0.4.2 Release Notes

馃殌 Major Updates

Dependency Upgrades

  • Upgraded to Python 3.9+ support (previously 3.8.1+)
  • Updated numerous core dependencies to latest versions, including:
    • pysigma (0.11.14)
    • pysigma backends and pipelines
    • langchain (0.2.16)
    • openai

New Backends

  • Added Kusto backend support:
    • Microsoft Defender XDR
    • Microsoft Sentinel ASIM
    • Azure Monitor
  • Added Netwitness backend

Enhanced Crowdstrike Support

  • Added Crowdstrike Logscale backend
  • Updated Crowdstrike Splunk backend to use FDR pipeline

馃敡 Improvements & Changes

Backend Refinements

  • Removed deprecated Microsoft365Defender backend
  • Updated Elasticsearch backend to support additional pipelines:
    • ecs_kubernetes
    • ecs_windows_old
    • ecs_zeek_beats
    • ecs_zeek_corelight
    • zeek_raw

LLM Module Enhancements

  • Expanded README with detailed feature descriptions and usage guidelines
  • Default LLM model changed to gpt-4o

馃悰 Bug Fixes

  • Various minor bug fixes and code improvements

馃摎 Documentation

  • Updated installation instructions and requirements
  • Enhanced LLM module documentation with examples and known issues

馃洜 Development Tools

  • Updated development dependencies (pytest, black, ruff)
  • Refined project configuration (pyproject.toml, ruff settings)

This release significantly enhances SigmAIQ's capabilities, especially in backend support and LLM integration. Users are encouraged to review the updated documentation for new features and potential breaking changes due to dependency updates.

Assets 2
Loading