v1.2.0
What's Changed
- Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #24
- Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #25
- Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #26
- Bump docker/login-action from 3 to 4 by @dependabot[bot] in #27
- Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #28
- build packaging manifests by @Gerrrt in #30
- New: added benign corpus test by @Gerrrt in #31
- New: navigator feature by @Gerrrt in #32
- New: gap -> rule scaffolding by @Gerrrt in #33
- New: verified detections in CI by @Gerrrt in #34
- Audit: EDR classifier by @Gerrrt in #35
- New: Structured Matcher Engine by @Gerrrt in #36
- New: Structured Matcher Engine. Migrate Linux KB by @Gerrrt in #37
- New: Structured Matcher Engine. Migrate Windows KB by @Gerrrt in #38
- New: Structured Matcher Engine. Migrate MacOS KB by @Gerrrt in #39
- author docs + optional regex + drop legacy fields + precision pass by @Gerrrt in #40
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #41
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #42
- New: regex leaf by @Gerrrt in #43
- scaffold represents any-alternations as Sigma OR-lists by @Gerrrt in #44
- net localgroup stuff by @Gerrrt in #45
- New: telemetry ingest - sysmon by @Gerrrt in #46
- New: Observed event sigma eval by @Gerrrt in #47
- New: auditd telemetry ingest by @Gerrrt in #48
- New: esf telemetry ingest by @Gerrrt in #49
- feat: richer fields by @Gerrrt in #50
- feat: correlation by @Gerrrt in #51
- feat: C users by @Gerrrt in #52
- feat: stand alone events by @Gerrrt in #53
- release v1.2.0 by @Gerrrt in #54
Full Changelog: v1.1.0...v1.2.0
What's Changed
- Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #24
- Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #25
- Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #26
- Bump docker/login-action from 3 to 4 by @dependabot[bot] in #27
- Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #28
- build packaging manifests by @Gerrrt in #30
- New: added benign corpus test by @Gerrrt in #31
- New: navigator feature by @Gerrrt in #32
- New: gap -> rule scaffolding by @Gerrrt in #33
- New: verified detections in CI by @Gerrrt in #34
- Audit: EDR classifier by @Gerrrt in #35
- New: Structured Matcher Engine by @Gerrrt in #36
- New: Structured Matcher Engine. Migrate Linux KB by @Gerrrt in #37
- New: Structured Matcher Engine. Migrate Windows KB by @Gerrrt in #38
- New: Structured Matcher Engine. Migrate MacOS KB by @Gerrrt in #39
- author docs + optional regex + drop legacy fields + precision pass by @Gerrrt in #40
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #41
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #42
- New: regex leaf by @Gerrrt in #43
- scaffold represents any-alternations as Sigma OR-lists by @Gerrrt in #44
- net localgroup stuff by @Gerrrt in #45
- New: telemetry ingest - sysmon by @Gerrrt in #46
- New: Observed event sigma eval by @Gerrrt in #47
- New: auditd telemetry ingest by @Gerrrt in #48
- New: esf telemetry ingest by @Gerrrt in #49
- feat: richer fields by @Gerrrt in #50
- feat: correlation by @Gerrrt in #51
- feat: C users by @Gerrrt in #52
- feat: stand alone events by @Gerrrt in #53
- release v1.2.0 by @Gerrrt in #54
Full Changelog: v1.1.0...v1.2.0
What's Changed
- Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #24
- Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #25
- Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #26
- Bump docker/login-action from 3 to 4 by @dependabot[bot] in #27
- Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #28
- build packaging manifests by @Gerrrt in #30
- New: added benign corpus test by @Gerrrt in #31
- New: navigator feature by @Gerrrt in #32
- New: gap -> rule scaffolding by @Gerrrt in #33
- New: verified detections in CI by @Gerrrt in #34
- Audit: EDR classifier by @Gerrrt in #35
- New: Structured Matcher Engine by @Gerrrt in #36
- New: Structured Matcher Engine. Migrate Linux KB by @Gerrrt in #37
- New: Structured Matcher Engine. Migrate Windows KB by @Gerrrt in #38
- New: Structured Matcher Engine. Migrate MacOS KB by @Gerrrt in #39
- author docs + optional regex + drop legacy fields + precision pass by @Gerrrt in #40
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #41
- author docs + optional regex + drop legacy fields + precision pass nu… by @Gerrrt in #42
- New: regex leaf by @Gerrrt in #43
- scaffold represents any-alternations as Sigma OR-lists by @Gerrrt in #44
- net localgroup stuff by @Gerrrt in #45
- New: telemetry ingest - sysmon by @Gerrrt in #46
- New: Observed event sigma eval by @Gerrrt in #47
- New: auditd telemetry ingest by @Gerrrt in #48
- New: esf telemetry ingest by @Gerrrt in #49
- feat: richer fields by @Gerrrt in #50
- feat: correlation by @Gerrrt in #51
- feat: C users by @Gerrrt in #52
- feat: stand alone events by @Gerrrt in #53
- release v1.2.0 by @Gerrrt in #54
Full Changelog: v1.1.0...v1.2.0