First release
- Support IPScan NAC log parser, log schema, logger model, and dashboard.
Changelog
- Fixed parse failure for App Control log type
Changelog
- Threat Response module version 3.10.59 can be processed
Fixed error when log collecting stops if error occurs during log collecting.
First release
- Added Tgate log parser, log schema, logger model, and dashboard
Stellar Cyber alert logger, log schema, logger model, dashboard.
Add HTTP proxy support
Added CRITICAL_ACTION monitoring dashboard
- Download (EXPORT), create (CREATE), modify (UPDATE), and delete (DELETE) actions
Support Azure DevOps audit logger model, log schema, dashboard.
Added Splunk HEC logger.
Ehhanced XSS, XXE, double encoding feature detection of ml-scan-http-request command.
kakaowork-send-msg extended command improvements
* Added support for multiple emails to email option
* Added conversation-name option (to set chat room name)
* Added conversation-id option (to send a message to an existing chat room)
Add comment extend command
- Added agit-comment extend command to register comments on original posts
First release
- REST API based loggers, log schemas, query commands, dashboards, and detection rules.
- Support antivirus scan, antivirus alerts, web filter, ransomware execution, ransomware file access logs.
Improved error when a CEF field has an empty value that requires casting
Support for two additional log types
- SYSTEM
- NETWORK
Improved parsing failures due to difference in delimiter space count
First release
- Support dedicated log parser, logger model, and dahsboard.
Support Azure Front Door integration.
- Dedicated log parser, logger model, and dashboards.
First release
- Dedicated log parser, log schemas, logger model, and dashboard
- Extended query commands for eWalker WAF device
Fixed audit log collection delays due to Link header parsing failures.