Darktrace

Improvements

• Added support for parsing CEF format logs
• Added parsed fields for JSON logs: Destination IP, Destination Port, Destination Host, Destination ASN, URI, Priority, Tags, MITRE technique ID and name
• Added 8 fields to the Darktrace Model Breach log schema: Destination IP, Destination Port, Source Hostname, Destination Host, Destination ASN, URI, Priority, Tags

Fixed bugs

• Fixed an issue where the dashboard time filter was not applied
• Fixed an issue where unknown logs were included in dashboard aggregation

First release

• v3.0.8 or above
• Darktrace log parser, log schema, logger model, and dashboard