v0.11.0

0.11.0 (2026-06-03)

Features

• client: add proxy configuration for outbound Falcon API connections (#408) (5ebafe1), closes #405
• modules/correlation-rules: add NG-SIEM Correlation Rules module (#391) (afd0a88)
• modules/data-protection: add Data Protection module (#428) (fff356c)
• modules/quarantine: add quarantine workflows (#352) (0e66344)
• modules/rtr: add audit and command wait workflows (#356) (14b1007)

Bug Fixes

• docker: use multi-stage COPY pattern for uv binary (#411) (a1f0628)
• modules/cloud: return int count from count_kubernetes_containers (#397) (42d1172)
• modules/correlation-rules: align API fields with live behavior (#407) (0199222)
• modules/idp: resolve FieldInfo defaults before building search_criteria (#396) (47205d1)
• modules/intel: parse JSON format in get_mitre_report (#429) (62e698c), closes #383