What's Changed
- feature(convert): add format_correlation and pipelines_correlation override by @0xFustang in #59
- feature(correlation): cover custom field merge for atomic and correlation rules by @0xFustang in #60
- feature(correlation): soft-error for non-compatible correlation type + use Sigma metadata from correlation document by @0xFustang in #61
- feat(ms_xdr): update user assets identifier list by @0xFustang in #62
- fix(convert): handle unsupported rules cleanly in MSSP mode by @0xFustang in #63
Full Changelog: v0.3.1...v0.3.2