Skip to content

v0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@cavokz cavokz released this 27 Oct 16:02
· 23 commits to main since this release
v0.5.0
This tag was signed with the committer’s verified signature.
cavokz Domenico Andreoli
GPG key ID: 1998935946430124
Verified
Learn about vigilant mode.
a107b8d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Core

  • Upgrade to EQL 1.0.
  • Update the ECS schemas through 9.5.
  • Refresh the detection rules for supported Stack and Serverless versions.
  • Emit event.ingested one millisecond after @timestamp to ensure generated
    events are available to rule execution.

Testing

  • Extend the Stack test drill through 9.6, including the 8.18 and 8.19 releases.
  • Treat partial rule-execution failures as failed executions.
  • Retry Elasticsearch bulk data loads safely and fix EPR timeout retries.
  • Add checks to detect drift between CI workflows and branch protection rules.
  • Test on 3.15 while retaining Python 3.8 as the minimum supported version.

Tooling

  • Add scripts and agents to automate detection rule updates.
  • Use PyPI trusted publishing for releases.
Assets 2
Loading