threatseer 0.4.0

BACKWARDS INCOMPATIBILITIES:

None

FEATURES:

Added SQL DB output support - any database/sql compatible driver should work.
This feature is added for an upcoming release that will have Metabase integration for analytics, dashboards, and alerting.

IMPROVEMENTS:

• use LRU cache for tracking profiled applications in the profile engine
• overall indicator score is calculated and included in the beats outputs
• increased kernel tracing buffer on agent to handle higher event volumes

BUG FIXES:

None

threatseer 0.3.0

BACKWARDS INCOMPATIBILITIES:

None

FEATURES:

• added mutual TLS support (#15)
  • enabled configurable server endpoint for agent

IMPROVEMENTS:

• exposed some Profile Engine tunables
• use LRU cache for tracking ongoing execution profiling (#12)

BUG FIXES:

None

threatseer 0.2.0

BACKWARDS INCOMPATIBILITIES:

• threatseer config changed

FEATURES:

• added Profile Engine for automatic executable and container image execution profiling

IMPROVEMENTS:

• cache Dynamic Engine rule ASTs
• buffer events for engine pipeline
• JSON logging improvements

BUG FIXES:

None

threatseer 0.1.1

includes some agent fixes

threatseer 0.1.0

FEATURES:

• added Static Analysis Engine
• added Dynamic Query Engine