New
v0.6.5
New features and fixes:
- Processes running as part of systemd services get service information added as part of the PID enrichment (https://github.com/threathunters-io/laurel/pull/243)
- Translate
IO_URINGoperations (like auditd 3.1+) (https://github.com/threathunters-io/laurel/pull/248) - Option to use a prefix instead of capitalized key names for enriched/translated data (https://github.com/threathunters-io/laurel/pull/245)
- Improve process tracking reliability by handling SYSCALL audit messages as early as possible (https://github.com/threathunters-io/laurel/pull/238)
- Improve caching in user/group lookups (https://github.com/threathunters-io/laurel/pull/249)