endpoint-package

What's Changed

• Add process.Ext.protection to Windows library events by @jdu2600 in https://github.com/elastic/endpoint-package/pull/528

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.15.0...v8.15.1

What's Changed

• Prepare main branch for next release cycle by @pzl in https://github.com/elastic/endpoint-package/pull/495
• cherry-pick update custom documentation (#497) by @intxgo in https://github.com/elastic/endpoint-package/pull/498
• remove unreleased document fields documentation which were accidental… by @intxgo in https://github.com/elastic/endpoint-package/pull/501
• Fix formatting/order from ecs build tool by @pzl in https://github.com/elastic/endpoint-package/pull/505
• [8.15] add truncated_stack to api.behaviors documentation by @jdu2600 in https://github.com/elastic/endpoint-package/pull/504
• Add event.dataset to api datastream by @pzl in https://github.com/elastic/endpoint-package/pull/507
• add heartbeat billable field by @joeypoon in https://github.com/elastic/endpoint-package/pull/510
• 8.15 update custom documentation by @intxgo in https://github.com/elastic/endpoint-package/pull/513
• Add file.origin_referrer_url and file.origin_url to FileEvent by @AsuNa-jp in https://github.com/elastic/endpoint-package/pull/514
• Prepare 8.15 release by @pzl in https://github.com/elastic/endpoint-package/pull/515

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.14.0...v8.15.0

What's Changed

• setup 8.14 cycle by @pzl in https://github.com/elastic/endpoint-package/pull/476
• Test Enable HTTPS cloning by @pzl in https://github.com/elastic/endpoint-package/pull/481
• Add missing branch defs by @pzl in https://github.com/elastic/endpoint-package/pull/482
• add the files missing from #470 by @ferullo in https://github.com/elastic/endpoint-package/pull/486
• Added 'effective' user field. by @matthewscherer in https://github.com/elastic/endpoint-package/pull/485
• [8.14] API event field updates by @jdu2600 in https://github.com/elastic/endpoint-package/pull/479
• Convert transforms to v3 yaml definition & set to unattended by @pzl in https://github.com/elastic/endpoint-package/pull/487
• Bump prerelease for testing by @pzl in https://github.com/elastic/endpoint-package/pull/488
• Revert unattended transforms, bump prelease by @pzl in https://github.com/elastic/endpoint-package/pull/489
• HWBP => Production by @gabriellandau in https://github.com/elastic/endpoint-package/pull/490
• Release 8.14 by @pzl in https://github.com/elastic/endpoint-package/pull/493

New Contributors

• @matthewscherer made their first contribution in https://github.com/elastic/endpoint-package/pull/485

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.13.0...v8.14.0

What's Changed

• Revert "Revert "Transform schema v2 (#270)" (#411)" by @pzl in https://github.com/elastic/endpoint-package/pull/418
• add 8.11 custom documentation by @ferullo in https://github.com/elastic/endpoint-package/pull/446
• Enable Unattended Transforms by @pzl in https://github.com/elastic/endpoint-package/pull/447
• additional 8.11 custom documentation fields by @ferullo in https://github.com/elastic/endpoint-package/pull/450
• make endpoint team sole owners of custom docs by @pzl in https://github.com/elastic/endpoint-package/pull/451
• Original Extension field for file rename events by @ricardoungureanu in https://github.com/elastic/endpoint-package/pull/457
• Revert v3 compliance work by @pzl in https://github.com/elastic/endpoint-package/pull/461
• Setup 8.13 cycle by @pzl in https://github.com/elastic/endpoint-package/pull/462
• Signing using Buildkite by @gogochan in https://github.com/elastic/endpoint-package/pull/463
• [BUILDKITE] trigger publishing by @gogochan in https://github.com/elastic/endpoint-package/pull/464
• validating publishing by @gogochan in https://github.com/elastic/endpoint-package/pull/465
• fix branch_configuration by @gogochan in https://github.com/elastic/endpoint-package/pull/466
• disable jenkins by @gogochan in https://github.com/elastic/endpoint-package/pull/467
• add 8.12 custom documentation by @ferullo in https://github.com/elastic/endpoint-package/pull/470
• Fix kibana version condition and additional buildkite settings by @gogochan in https://github.com/elastic/endpoint-package/pull/473

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.12.0...v8.13.0

What's Changed

• convert main branch to 8.12 release cycle by @pzl in https://github.com/elastic/endpoint-package/pull/434
• remove obj type for api generated files by @pzl in https://github.com/elastic/endpoint-package/pull/460
• additional process callstack fields by @jdu2600 in https://github.com/elastic/endpoint-package/pull/435
• reformat metadata yaml, removed dotted-keys by @pzl in https://github.com/elastic/endpoint-package/pull/441
• artifacts manifest update age, snapshot date by @intxgo in https://github.com/elastic/endpoint-package/pull/440
• Replace more dotted keys by @pzl in https://github.com/elastic/endpoint-package/pull/442
• Add memory_region to api events by @jdu2600 in https://github.com/elastic/endpoint-package/pull/445
• Keylogging (Win32k ETW) API Event (production) by @AsuNa-jp in https://github.com/elastic/endpoint-package/pull/444
• Keylogging (Win32k ETW) API Event (production) (rename some fields) by @AsuNa-jp in https://github.com/elastic/endpoint-package/pull/456
• mark integration as requiring root-level agent by @pzl in https://github.com/elastic/endpoint-package/pull/458

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.11.0...v8.12.0

What's Changed

• set up 8.11 release cycle by @pzl in https://github.com/elastic/endpoint-package/pull/406
• fix buildkite catalog owner by @gogochan in https://github.com/elastic/endpoint-package/pull/417
• Custom documentation 8.10 by @ferullo in https://github.com/elastic/endpoint-package/pull/421
• move where custom documentation is rendered by @ferullo in https://github.com/elastic/endpoint-package/pull/422
• [macOS] Add Effective_process fields for file events by @ricardoungureanu in https://github.com/elastic/endpoint-package/pull/423
• add more custom documentation fields on windows by @ferullo in https://github.com/elastic/endpoint-package/pull/424
• Add buildkite Build step by @gogochan in https://github.com/elastic/endpoint-package/pull/425
• Effective Process for library load events by @ricardoungureanu in https://github.com/elastic/endpoint-package/pull/426
• add more missing custom_documentation fields by @ferullo in https://github.com/elastic/endpoint-package/pull/430
• Add linux capabilities to process events by @nicholasberlin in https://github.com/elastic/endpoint-package/pull/431
• ETW Threat-Intelligence API events by @jdu2600 in https://github.com/elastic/endpoint-package/pull/427
• Update package spec and capabilities for serverless filtering by @pzl in https://github.com/elastic/endpoint-package/pull/428
• mark 8.11.0 release by @pzl in https://github.com/elastic/endpoint-package/pull/432

New Contributors

• @nicholasberlin made their first contribution in https://github.com/elastic/endpoint-package/pull/431

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.10.2...v8.11.0

What's Changed

• setup 8.10.2 dev cycle by @pzl in https://github.com/elastic/endpoint-package/pull/410
• Revert "Transform schema v2 (#270)" (#411) by @pzl in https://github.com/elastic/endpoint-package/pull/412
• [backport][8.10] update 8.10.2 changelog (#413) by @pzl in https://github.com/elastic/endpoint-package/pull/414
• Release 8.10.2 by @pzl in https://github.com/elastic/endpoint-package/pull/415

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.10.1...v8.10.2

What's Changed

• setup 8.10.1 dev cycle by @pzl in https://github.com/elastic/endpoint-package/pull/405
• [backport][8.10] Revert unattended transforms (#407) by @pzl in https://github.com/elastic/endpoint-package/pull/408
• release 8.10.1 by @pzl in https://github.com/elastic/endpoint-package/pull/409

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.10.0...v8.10.1

What's Changed

• Setup 8.10.0 cycle by @kevinlog in https://github.com/elastic/endpoint-package/pull/381
• [Security Solution] Update description copy by @kevinlog in https://github.com/elastic/endpoint-package/pull/380
• [Security Solution] 8.9.1 changelog by @kevinlog in https://github.com/elastic/endpoint-package/pull/383
• Update elastic-package tool and pyyaml by @pzl in https://github.com/elastic/endpoint-package/pull/394
• Create catalog-info file by @elastic-backstage-prod in https://github.com/elastic/endpoint-package/pull/397
• add endpoint custom documentation to generate-docs by @ferullo in https://github.com/elastic/endpoint-package/pull/389
• add heartbeat ds by @joeypoon in https://github.com/elastic/endpoint-package/pull/396
• Keylogging (Win32k ETW) API Event metrics by @AsuNa-jp in https://github.com/elastic/endpoint-package/pull/395
• Add code_signature mappings for API events by @ferullo in https://github.com/elastic/endpoint-package/pull/398
• add enabled_features to the heartbeat document by @ferullo in https://github.com/elastic/endpoint-package/pull/399
• Transform schema v2 by @pzl in https://github.com/elastic/endpoint-package/pull/270
• revert adding Endpoint.state.enabled_features by @ferullo in https://github.com/elastic/endpoint-package/pull/400
• Added Process Rollback fields by @bit-envoy in https://github.com/elastic/endpoint-package/pull/393
• Set transforms to be unattended by @pzl in https://github.com/elastic/endpoint-package/pull/401
• add 8.10 changelog entries by @pzl in https://github.com/elastic/endpoint-package/pull/403
• 8.10.0 Release by @pzl in https://github.com/elastic/endpoint-package/pull/404

New Contributors

• @elastic-backstage-prod made their first contribution in https://github.com/elastic/endpoint-package/pull/397

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.9.0...v8.10.0

What's Changed

• change release instructions to use -dev by @pzl in https://github.com/elastic/endpoint-package/pull/369
• set up 8.9 dev cycle by @pzl in https://github.com/elastic/endpoint-package/pull/368
• ETW Threat-Intelligence API Event metrics by @jdu2600 in https://github.com/elastic/endpoint-package/pull/370
• Fix mapping error by replacing string with keyword by @kevinlog in https://github.com/elastic/endpoint-package/pull/373
• 8.9 changelog by @kevinlog in https://github.com/elastic/endpoint-package/pull/374
• Release 8.9 Endpoint package by @kevinlog in https://github.com/elastic/endpoint-package/pull/375

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.8.0...v8.9.0

What's Changed

• [Fix] Make process.Ext.api.name indexable by @calladoum-elastic in https://github.com/elastic/endpoint-package/pull/345
• Update package overview by @kevinlog in https://github.com/elastic/endpoint-package/pull/346
• Update changelog in preparation for 8.7.1 by @kevinlog in https://github.com/elastic/endpoint-package/pull/350
• [Memory Protection] Add fields for trampoline detection. by @calladoum-elastic in https://github.com/elastic/endpoint-package/pull/344
• update transforms to be unattended by @joeypoon in https://github.com/elastic/endpoint-package/pull/353
• Update Endpoint package categories by @jen-huang in https://github.com/elastic/endpoint-package/pull/354
• always publish prerelease by @joeypoon in https://github.com/elastic/endpoint-package/pull/356
• bump prerelease version by @joeypoon in https://github.com/elastic/endpoint-package/pull/357
• Add fields connected to rules and alerts by @tomsonpl in https://github.com/elastic/endpoint-package/pull/355
• Added Registry Rollback Fields to Package by @bit-envoy in https://github.com/elastic/endpoint-package/pull/358
• Revert "update transforms to be unattended (#353)" by @joeypoon in https://github.com/elastic/endpoint-package/pull/359
• Add thread callstacks to process, file, registry, and image/library load events by @gabriellandau in https://github.com/elastic/endpoint-package/pull/360
• File system type by @Trinity2019 in https://github.com/elastic/endpoint-package/pull/361
• Added registry rollback fields associated with recovered values by @bit-envoy in https://github.com/elastic/endpoint-package/pull/362
• change action.key.values to object in alerts by @pzl in https://github.com/elastic/endpoint-package/pull/364
• Add changelog for 8.8.0 by @pzl in https://github.com/elastic/endpoint-package/pull/365
• Release 8.8.0 by @pzl in https://github.com/elastic/endpoint-package/pull/366

New Contributors

• @jen-huang made their first contribution in https://github.com/elastic/endpoint-package/pull/354
• @tomsonpl made their first contribution in https://github.com/elastic/endpoint-package/pull/355

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.7.0...v8.8.0

What's Changed

• Make process.Ext.api.name indexable (#345) by @kevinlog in https://github.com/elastic/endpoint-package/pull/347
• Update package overview (#346) by @kevinlog in https://github.com/elastic/endpoint-package/pull/348
• Update 8.7 branch Jenkins file to publish 8.7.x line Endpoint packages by @kevinlog in https://github.com/elastic/endpoint-package/pull/349
• 8.7.1 release by @kevinlog in https://github.com/elastic/endpoint-package/pull/351

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.7.0...v8.7.1

What's Changed

• change the GA changelog reference link, to appease the linter by @pzl in https://github.com/elastic/endpoint-package/pull/317
• Rename process.Ext.session -> session_info and restore legacy keyword field by @gabriellandau in https://github.com/elastic/endpoint-package/pull/318
• Update ECS to 8.5.2 by @kevinlog in https://github.com/elastic/endpoint-package/pull/322
• Update changelog in preparation for 8.6.1 by @kevinlog in https://github.com/elastic/endpoint-package/pull/321
• Mitigation policies by @Trinity2019 in https://github.com/elastic/endpoint-package/pull/319
• Report DLL Sizes by @gabriellandau in https://github.com/elastic/endpoint-package/pull/329
• [8.7] Add new data stream for API event types by @calladoum-elastic in https://github.com/elastic/endpoint-package/pull/328
• Update unsupported u64 type to unsigned_long by @kevinlog in https://github.com/elastic/endpoint-package/pull/337
• 11957 hardware breakpoint set by @AsuNa-jp in https://github.com/elastic/endpoint-package/pull/333
• Adding persistence event by @ricardoungureanu in https://github.com/elastic/endpoint-package/pull/336
• Update ECS to 8.7-dev by @gabriellandau in https://github.com/elastic/endpoint-package/pull/338

Repo Changes

• prep 8.7 dev cycle by @pzl in https://github.com/elastic/endpoint-package/pull/314
• master -> main by @pzl in https://github.com/elastic/endpoint-package/pull/315
• Update run-registry command and README by @kevinlog in https://github.com/elastic/endpoint-package/pull/327
• Update release notes by @pzl in https://github.com/elastic/endpoint-package/pull/339
• 8.7 Release by @pzl in https://github.com/elastic/endpoint-package/pull/340

New Contributors

• @Trinity2019 made their first contribution in https://github.com/elastic/endpoint-package/pull/319
• @calladoum-elastic made their first contribution in https://github.com/elastic/endpoint-package/pull/328
• @AsuNa-jp made their first contribution in https://github.com/elastic/endpoint-package/pull/333
• @ricardoungureanu made their first contribution in https://github.com/elastic/endpoint-package/pull/336

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.6.0...v8.7.0

What's Changed

• bump things for 8.6 dev cycle on main branch by @pzl in https://github.com/elastic/endpoint-package/pull/302
• [8.6] Add entity_id mappings to file and network datastreams in endpoint-package by @Omolola-Akinleye in https://github.com/elastic/endpoint-package/pull/306
• .NET Metadata Hashes by @gabriellandau in https://github.com/elastic/endpoint-package/pull/307
• Added call_stack_contains_unbacked field by @bit-envoy in https://github.com/elastic/endpoint-package/pull/308
• Add session data to Windows process creation events by @gabriellandau in https://github.com/elastic/endpoint-package/pull/309
• 8.6 release by @pzl in https://github.com/elastic/endpoint-package/pull/312

New Contributors

• @Omolola-Akinleye made their first contribution in https://github.com/elastic/endpoint-package/pull/306
• @bit-envoy made their first contribution in https://github.com/elastic/endpoint-package/pull/308

Full Changelog: https://github.com/elastic/endpoint-package/compare/v8.5.0...v8.6.0