Skip to content

Commit b5bbe25

Browse files
author
Mathieu Martin
authored
Cut ECS 1.5.0 changelog (#773)
1 parent ce9028d commit b5bbe25

File tree

2 files changed

+38
-24
lines changed

2 files changed

+38
-24
lines changed

CHANGELOG.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,44 @@
44
All notable changes to this project will be documented in this file based on the [Keep a Changelog](http://keepachangelog.com/) Standard. This project adheres to [Semantic Versioning](http://semver.org/).
55

66

7+
## [1.5.0](https://github.com/elastic/ecs/compare/v1.4.0...v1.5.0)
8+
9+
### Schema Changes
10+
11+
#### Added
12+
13+
* Added `dll.*` fields #679
14+
* Added `related.hash` to keep track of all hashes seen on an event. #711
15+
* Added fieldset for PE metadata. #731
16+
* Added `code_signature` fieldset. #733
17+
* Added missing `hash` fields at `process.parent.hash.*`. #739
18+
* Added globally unique identifier `entity_id` to `process` and `process.parent`. #747
19+
* Added interface, vlan, observer zone fields #752
20+
* Added `rule.author`, `rule.license` fields #754
21+
* Added iam value for `event.category` and three related values for `event.type`. #756
22+
* Added fields `event.reference` and `event.url` to hold link to additional event info/actions. #757
23+
* Added `file.mime_type` to include MIME type information on file structures #760
24+
* Added `event.category` value of network and associated `event.type` values. #761
25+
26+
#### Improvements
27+
28+
* Temporary workaround for Beats templates' `default_field` growing too big. #687
29+
* Identify which fields should contain arrays of values, rather than scalar values. #727, #661
30+
* Clarified examples and definitions regarding vulnerabilities. #758
31+
* Updated definition of `event.outcome` based on community feedback. #759
32+
33+
34+
### Tooling and Artifact Changes
35+
36+
#### Improvements
37+
38+
* ECS scripts now use Python 3.6+. #674
39+
* schema\_reader.py now reliably supports chaining reusable fieldsets together. #722
40+
* Allow the artifact generator to consider and output only a subset of fields. #737
41+
* Add support for reusing fields in places other than the top level of the destination fieldset. #739
42+
* Add support for specifying the directory to write the generated files. #748
43+
44+
745
## [1.4.0](https://github.com/elastic/ecs/compare/v1.3.1...v1.4.0)
846

947
### Schema Changes

CHANGELOG.next.md

Lines changed: 0 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -16,26 +16,8 @@ Thanks, you're awesome :-) -->
1616

1717
#### Added
1818

19-
* Added `dll.*` fields #679
20-
* Fieldset for PE metadata. #731
21-
* Globally unique identifier `entity_id` for `process` and `process.parent`. #747
22-
* Added interface, vlan, observer zone fields #752
23-
* Added `rule.author`, `rule.license` fields #754
24-
* Added iam value for `event.category` and three related values for `event.type`. #756
25-
* Added `file.mime_type` to include MIME type information on file structures #760
26-
27-
* Added fields `event.reference` and `event.url` to hold link to additional event info/actions. (#757)
28-
29-
30-
* Added `event.category` value of network and associated `event.type` values. (#761)
31-
3219
#### Improvements
3320

34-
* Temporary workaround for Beats templates' `default_field` growing too big. #687
35-
* Identify which fields should contain arrays of values, rather than scalar values. #727, #661
36-
* Clarified examples and definitions regarding vulnerabilities #758
37-
* Updated definition of `event.outcome` based on community feedback #759
38-
3921
#### Deprecated
4022

4123

@@ -49,12 +31,6 @@ Thanks, you're awesome :-) -->
4931

5032
#### Improvements
5133

52-
* ECS scripts now use Python 3.6+. #674
53-
* schema_reader.py now reliably supports chaining reusable fieldsets together. #722
54-
* Allow the artifact generator to consider and output only a subset of fields. #737
55-
* Add support for reusing fields in places other than the top level of the destination fieldset. #739
56-
* Add support for specifying the directory to write the generated files. #748
57-
5834
#### Deprecated
5935

6036

0 commit comments

Comments
 (0)