8.19.3 release notes

docs/release-notes.asciidoc

@@ -3,6 +3,7 @@
 
 This section summarizes the changes in each release.
 
+* <<release-notes-8.19.3, {elastic-sec} version 8.19.3>>
 * <<release-notes-8.19.2, {elastic-sec} version 8.19.2>>
 * <<release-notes-8.19.1, {elastic-sec} version 8.19.1>>
 * <<release-notes-8.19.0, {elastic-sec} version 8.19.0>>

docs/release-notes/8.19.asciidoc

@@ -1,6 +1,27 @@
 [[release-notes-header-8.19.0]]
 == 8.19
 
+[discrete]
+[[release-notes-8.19.3]]
+=== 8.19.3
+
+[discrete]
+[[enhancements-8.19.3]]
+==== Enhancements
+* Improves the reliability of {elastic-defend}'s connection to its kernel driver. This should reduce the instances of temporary `DEGRADED` policy statuses at boot due to `connect_kernel` failures.
+* Enriches {elastic-defend} macOS network connect events with `network.direction`. Possible values are `ingress` and `egress`.
+
+[discrete]
+[[bug-fixes-8.19.3]]
+==== Fixes
+* Fixes a bug in Session View where `args` fields in `event.process` and nested objects had string values instead of array of strings as expected ({kibana-pull}232462[#232462]).
+* Fixes a bug in {elastic-defend} where Linux endpoints would report `process.executable` as a relative, instead of absolute, path.
+* Fixes a bug where {elastic-defend} Linux network events would fail to load if IPv6 is not supported by the system.
+* Fixes a bug in {elastic-defend} where the `fqdn` feature flag was not being persisted across system or endpoint restarts.
+* Fixes a race condition in {elastic-defend} on Windows that occasionally resulted in corrupted process command lines. This could cause incorrect values for `process.command_line`, `process.args_count`, and `process.args`, leading to false positives.
+* Hides case connectors in the create case workflow based on your license ({kibana-pull}232506[#232506]).
+* Fixes inconsistencies in case activity statistics ({kibana-pull}231948[#231948]).
+
 [discrete]
 [[release-notes-8.19.2]]
 === 8.19.2