BACKWARDS INCOMPATIBILITIES:
None
FEATURES:
Added SQL DB output support - any database/sql
compatible driver should work.
This feature is added for an upcoming release that will have Metabase integration for analytics, dashboards, and alerting.
IMPROVEMENTS:
- use LRU cache for tracking profiled applications in the profile engine
- overall indicator score is calculated and included in the beats outputs
- increased kernel tracing buffer on agent to handle higher event volumes
BUG FIXES:
None
BACKWARDS INCOMPATIBILITIES:
FEATURES:
- added mutual TLS support (#15)
- enabled configurable server endpoint for agent
IMPROVEMENTS:
- exposed some Profile Engine tunables
- use LRU cache for tracking ongoing execution profiling (#12)
BUG FIXES:
None
BACKWARDS INCOMPATIBILITIES:
- threatseer config changed
FEATURES:
- added Profile Engine for automatic executable and container image execution profiling
IMPROVEMENTS:
- cache Dynamic Engine rule ASTs
- buffer events for engine pipeline
- JSON logging improvements
BUG FIXES:
None
BACKWARDS INCOMPATIBILITIES:
None
FEATURES:
None
IMPROVEMENTS:
None
BUG FIXES:
- vendored various upstream fixes since capsule8 0.12.0 release
initial release