MARS SLE

Improvements

• Support for parsing CDR-related fields and added schema fields
• Refined dataset queries so the dashboard time filter is applied
• Corrected the display name of the mail_to field in the url-scan schema

First release

• Validated against platform version 2.5.5.6.6, analytics engine 4.6.11.3, mail engine version 2.4.8.20
• MARS SLE log parser, logger model, dashboards (Mail, File, URL)
• MITRE ATTACK TTP detection rules (T1566.001, T1566.002)
• Extended query commands for playbook