New features and fixes:
- Processes running as part of systemd services get service information added as part of the PID enrichment (#243)
- Translate
IO_URINGoperations (like auditd 3.1+) (#248) - Option to use a prefix instead of capitalized key names for enriched/translated data (#245)
- Improve process tracking reliability by handling SYSCALL audit messages as early as possible (#238)
- Improve caching in user/group lookups (#249)