Repository navigation
Alterix v1.4.1: Enhancements and Fixes π
π Key Updates
-
Meta Value Processing Refinement π§
- Improved efficiency and accuracy in meta value processing, enhancing the core of rule evaluations.
-
Include "Author" Field π
- Added the "author" field to JSONResult, providing valuable insights into rule attribution.
-
Resolve Sourcetype Matching Issue π€
- Addressed and fixed sourcetype matching, ensuring precise identification of data sources.
-
Case-Sensitive Mode Added (-cs) π
- Introduced a case-sensitive mode with the
-csflag, offering more control over string matching.
- Introduced a case-sensitive mode with the
-
Translate Sigma Keywords Rules π
- Enabled Sigma rules translation with keywords, expanding compatibility.
-
Demo GIF Added to README π¬
- Included a demo GIF for a visual guide to Alterix's key features.
π Code Refinements
- Replace ioutil.ReadFile with os.ReadFile π
- Modernized file reading operations for improved performance.
π Documentation
- Update README for Docker Build π³
- Provided accurate Docker build command in the README for seamless integration.
π Bug Fixes
- Ensure Line Numbers in Unmarshalling Errors π
- Fixed to include line numbers in unmarshalling errors for easier debugging.
Alterix 1.4.1 β Elevating rule processing precision, addressing key issues, and introducing new features for an enhanced threat detection experience! π‘οΈ