8.15.1

What's Changed

• Add process.Ext.protection to Windows library events by @jdu2600 in #528

Full Changelog: v8.15.0...v8.15.1

8.15.0

What's Changed

• Prepare main branch for next release cycle by @pzl in #495
• cherry-pick update custom documentation (#497) by @intxgo in #498
• remove unreleased document fields documentation which were accidental… by @intxgo in #501
• Fix formatting/order from ecs build tool by @pzl in #505
• [8.15] add truncated_stack to api.behaviors documentation by @jdu2600 in #504
• Add event.dataset to api datastream by @pzl in #507
• add heartbeat billable field by @joeypoon in #510
• 8.15 update custom documentation by @intxgo in #513
• Add file.origin_referrer_url and file.origin_url to FileEvent by @AsuNa-jp in #514
• Prepare 8.15 release by @pzl in #515

Full Changelog: v8.14.0...v8.15.0

v8.14.0

What's Changed

• setup 8.14 cycle by @pzl in #476
• Test Enable HTTPS cloning by @pzl in #481
• Add missing branch defs by @pzl in #482
• add the files missing from #470 by @ferullo in #486
• Added 'effective' user field. by @matthewscherer in #485
• [8.14] API event field updates by @jdu2600 in #479
• Convert transforms to v3 yaml definition & set to unattended by @pzl in #487
• Bump prerelease for testing by @pzl in #488
• Revert unattended transforms, bump prelease by @pzl in #489
• HWBP => Production by @gabriellandau in #490
• Release 8.14 by @pzl in #493

New Contributors

• @matthewscherer made their first contribution in #485

Full Changelog: v8.13.0...v8.14.0

8.13.0

What's Changed

• Revert "Revert "Transform schema v2 (#270)" (#411)" by @pzl in #418
• add 8.11 custom documentation by @ferullo in #446
• Enable Unattended Transforms by @pzl in #447
• additional 8.11 custom documentation fields by @ferullo in #450
• make endpoint team sole owners of custom docs by @pzl in #451
• Original Extension field for file rename events by @ricardoungureanu in #457
• Revert v3 compliance work by @pzl in #461
• Setup 8.13 cycle by @pzl in #462
• Signing using Buildkite by @gogochan in #463
• [BUILDKITE] trigger publishing by @gogochan in #464
• validating publishing by @gogochan in #465
• fix branch_configuration by @gogochan in #466
• disable jenkins by @gogochan in #467
• add 8.12 custom documentation by @ferullo in #470
• Fix kibana version condition and additional buildkite settings by @gogochan in #473

Full Changelog: v8.12.0...v8.13.0

8.12.0

What's Changed

• convert main branch to 8.12 release cycle by @pzl in #434
• remove obj type for api generated files by @pzl in #460
• additional process callstack fields by @jdu2600 in #435
• reformat metadata yaml, removed dotted-keys by @pzl in #441
• artifacts manifest update age, snapshot date by @intxgo in #440
• Replace more dotted keys by @pzl in #442
• Add memory_region to api events by @jdu2600 in #445
• Keylogging (Win32k ETW) API Event (production) by @AsuNa-jp in #444
• Keylogging (Win32k ETW) API Event (production) (rename some fields) by @AsuNa-jp in #456
• mark integration as requiring root-level agent by @pzl in #458

Full Changelog: v8.11.0...v8.12.0

8.11.0

What's Changed

• set up 8.11 release cycle by @pzl in #406
• fix buildkite catalog owner by @gogochan in #417
• Custom documentation 8.10 by @ferullo in #421
• move where custom documentation is rendered by @ferullo in #422
• [macOS] Add Effective_process fields for file events by @ricardoungureanu in #423
• add more custom documentation fields on windows by @ferullo in #424
• Add buildkite Build step by @gogochan in #425
• Effective Process for library load events by @ricardoungureanu in #426
• add more missing custom_documentation fields by @ferullo in #430
• Add linux capabilities to process events by @nicholasberlin in #431
• ETW Threat-Intelligence API events by @jdu2600 in #427
• Update package spec and capabilities for serverless filtering by @pzl in #428
• mark 8.11.0 release by @pzl in #432

New Contributors

• @nicholasberlin made their first contribution in #431

Full Changelog: v8.10.2...v8.11.0

8.10.2

What's Changed

• setup 8.10.2 dev cycle by @pzl in #410
• Revert "Transform schema v2 (#270)" (#411) by @pzl in #412
• [backport][8.10] update 8.10.2 changelog (#413) by @pzl in #414
• Release 8.10.2 by @pzl in #415

Full Changelog: v8.10.1...v8.10.2

8.10.1

What's Changed

• setup 8.10.1 dev cycle by @pzl in #405
• [backport][8.10] Revert unattended transforms (#407) by @pzl in #408
• release 8.10.1 by @pzl in #409

Full Changelog: v8.10.0...v8.10.1

8.10.0

What's Changed

• Setup 8.10.0 cycle by @kevinlog in #381
• [Security Solution] Update description copy by @kevinlog in #380
• [Security Solution] 8.9.1 changelog by @kevinlog in #383
• Update elastic-package tool and pyyaml by @pzl in #394
• Create catalog-info file by @elastic-backstage-prod in #397
• add endpoint custom documentation to generate-docs by @ferullo in #389
• add heartbeat ds by @joeypoon in #396
• Keylogging (Win32k ETW) API Event metrics by @AsuNa-jp in #395
• Add code_signature mappings for API events by @ferullo in #398
• add enabled_features to the heartbeat document by @ferullo in #399
• Transform schema v2 by @pzl in #270
• revert adding Endpoint.state.enabled_features by @ferullo in #400
• Added Process Rollback fields by @bit-envoy in #393
• Set transforms to be unattended by @pzl in #401
• add 8.10 changelog entries by @pzl in #403
• 8.10.0 Release by @pzl in #404

New Contributors

• @elastic-backstage-prod made their first contribution in #397

Full Changelog: v8.9.0...v8.10.0

8.9.0

What's Changed

• change release instructions to use -dev by @pzl in #369
• set up 8.9 dev cycle by @pzl in #368
• ETW Threat-Intelligence API Event metrics by @jdu2600 in #370
• Fix mapping error by replacing string with keyword by @kevinlog in #373
• 8.9 changelog by @kevinlog in #374
• Release 8.9 Endpoint package by @kevinlog in #375

Full Changelog: v8.8.0...v8.9.0