8.11.0

What's Changed

• set up 8.11 release cycle by @pzl in #406
• fix buildkite catalog owner by @gogochan in #417
• Custom documentation 8.10 by @ferullo in #421
• move where custom documentation is rendered by @ferullo in #422
• [macOS] Add Effective_process fields for file events by @ricardoungureanu in #423
• add more custom documentation fields on windows by @ferullo in #424
• Add buildkite Build step by @gogochan in #425
• Effective Process for library load events by @ricardoungureanu in #426
• add more missing custom_documentation fields by @ferullo in #430
• Add linux capabilities to process events by @nicholasberlin in #431
• ETW Threat-Intelligence API events by @jdu2600 in #427
• Update package spec and capabilities for serverless filtering by @pzl in #428
• mark 8.11.0 release by @pzl in #432

New Contributors

• @nicholasberlin made their first contribution in #431

Full Changelog: v8.10.2...v8.11.0

8.10.2

What's Changed

• setup 8.10.2 dev cycle by @pzl in #410
• Revert "Transform schema v2 (#270)" (#411) by @pzl in #412
• [backport][8.10] update 8.10.2 changelog (#413) by @pzl in #414
• Release 8.10.2 by @pzl in #415

Full Changelog: v8.10.1...v8.10.2

8.10.1

What's Changed

• setup 8.10.1 dev cycle by @pzl in #405
• [backport][8.10] Revert unattended transforms (#407) by @pzl in #408
• release 8.10.1 by @pzl in #409

Full Changelog: v8.10.0...v8.10.1

8.10.0

What's Changed

• Setup 8.10.0 cycle by @kevinlog in #381
• [Security Solution] Update description copy by @kevinlog in #380
• [Security Solution] 8.9.1 changelog by @kevinlog in #383
• Update elastic-package tool and pyyaml by @pzl in #394
• Create catalog-info file by @elastic-backstage-prod in #397
• add endpoint custom documentation to generate-docs by @ferullo in #389
• add heartbeat ds by @joeypoon in #396
• Keylogging (Win32k ETW) API Event metrics by @AsuNa-jp in #395
• Add code_signature mappings for API events by @ferullo in #398
• add enabled_features to the heartbeat document by @ferullo in #399
• Transform schema v2 by @pzl in #270
• revert adding Endpoint.state.enabled_features by @ferullo in #400
• Added Process Rollback fields by @bit-envoy in #393
• Set transforms to be unattended by @pzl in #401
• add 8.10 changelog entries by @pzl in #403
• 8.10.0 Release by @pzl in #404

New Contributors

• @elastic-backstage-prod made their first contribution in #397

Full Changelog: v8.9.0...v8.10.0

8.9.0

What's Changed

• change release instructions to use -dev by @pzl in #369
• set up 8.9 dev cycle by @pzl in #368
• ETW Threat-Intelligence API Event metrics by @jdu2600 in #370
• Fix mapping error by replacing string with keyword by @kevinlog in #373
• 8.9 changelog by @kevinlog in #374
• Release 8.9 Endpoint package by @kevinlog in #375

Full Changelog: v8.8.0...v8.9.0

8.8.0

What's Changed

• [Fix] Make process.Ext.api.name indexable by @calladoum-elastic in #345
• Update package overview by @kevinlog in #346
• Update changelog in preparation for 8.7.1 by @kevinlog in #350
• [Memory Protection] Add fields for trampoline detection. by @calladoum-elastic in #344
• update transforms to be unattended by @joeypoon in #353
• Update Endpoint package categories by @jen-huang in #354
• always publish prerelease by @joeypoon in #356
• bump prerelease version by @joeypoon in #357
• Add fields connected to rules and alerts by @tomsonpl in #355
• Added Registry Rollback Fields to Package by @bit-envoy in #358
• Revert "update transforms to be unattended (#353)" by @joeypoon in #359
• Add thread callstacks to process, file, registry, and image/library load events by @gabriellandau in #360
• File system type by @Trinity2019 in #361
• Added registry rollback fields associated with recovered values by @bit-envoy in #362
• change action.key.values to object in alerts by @pzl in #364
• Add changelog for 8.8.0 by @pzl in #365
• Release 8.8.0 by @pzl in #366

New Contributors

• @jen-huang made their first contribution in #354
• @tomsonpl made their first contribution in #355

Full Changelog: v8.7.0...v8.8.0

8.7.1

What's Changed

• Make process.Ext.api.name indexable (#345) by @kevinlog in #347
• Update package overview (#346) by @kevinlog in #348
• Update 8.7 branch Jenkins file to publish 8.7.x line Endpoint packages by @kevinlog in #349
• 8.7.1 release by @kevinlog in #351

Full Changelog: v8.7.0...v8.7.1

8.7.0

What's Changed

• change the GA changelog reference link, to appease the linter by @pzl in #317
• Rename process.Ext.session -> session_info and restore legacy keyword field by @gabriellandau in #318
• Update ECS to 8.5.2 by @kevinlog in #322
• Update changelog in preparation for 8.6.1 by @kevinlog in #321
• Mitigation policies by @Trinity2019 in #319
• Report DLL Sizes by @gabriellandau in #329
• [8.7] Add new data stream for API event types by @calladoum-elastic in #328
• Update unsupported u64 type to unsigned_long by @kevinlog in #337
• 11957 hardware breakpoint set by @AsuNa-jp in #333
• Adding persistence event by @ricardoungureanu in #336
• Update ECS to 8.7-dev by @gabriellandau in #338

Repo Changes

• prep 8.7 dev cycle by @pzl in #314
• master -> main by @pzl in #315
• Update run-registry command and README by @kevinlog in #327
• Update release notes by @pzl in #339
• 8.7 Release by @pzl in #340

New Contributors

• @Trinity2019 made their first contribution in #319
• @calladoum-elastic made their first contribution in #328
• @AsuNa-jp made their first contribution in #333
• @ricardoungureanu made their first contribution in #336

Full Changelog: v8.6.0...v8.7.0

8.6.0

What's Changed

• bump things for 8.6 dev cycle on main branch by @pzl in #302
• [8.6] Add entity_id mappings to file and network datastreams in endpoint-package by @Omolola-Akinleye in #306
• .NET Metadata Hashes by @gabriellandau in #307
• Added call_stack_contains_unbacked field by @bit-envoy in #308
• Add session data to Windows process creation events by @gabriellandau in #309
• 8.6 release by @pzl in #312

New Contributors

• @Omolola-Akinleye made their first contribution in #306
• @bit-envoy made their first contribution in #308

Full Changelog: v8.5.0...v8.6.0