From 5c4fd3a1229a9f30ae05d5eaf8446eee06cdb063 Mon Sep 17 00:00:00 2001 From: Thomas Patzke Date: Sat, 14 Aug 2021 00:25:12 +0200 Subject: [PATCH] Release 0.20 --- CHANGELOG.md | 36 ++++++++++++++++++++++++++++++++++++ tools/setup.py | 9 ++++----- 2 files changed, 40 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 22c20035fa4..ece949b93ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,42 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) from version 0.14.0. +## 0.20 - 2021-08-14 + +### Added + +* Devo backend +* Fields selection added to SQL backend +* Linux/MacOS support for MDATP backend +* Output results as generic YAML/JSON +* Hash normalization option (hash_normalize) for Elasticsearch wildcard handling +* ALA AWS Cloudtrail and Azure mappings +* Logrhytm backend +* Splunk Data Models backend +* Further log sources used in open source Sigma ruleset +* CarbonBlack EDR backend +* Elastic EQL backend +* Additional conversion selection filters +* Filter negation +* Specifiy table in SQL backend +* Generic registry event log source +* Chronicle backend + +### Changed + +* Elastic Watcher backend populates name attribute instead of title. +* One item list optimization. +* Updated Winlogbeat mapping +* Generic mapping for Powershell backend + +### Fixed + +* Elastalert multi output file +* Fixed duplicate output in ElastAlert backend +* Escaping in Graylog backend +* es-rule ndjson output +* Various fixes of known bugs + ## 0.19.1 - 2021-02-28 ### Changed diff --git a/tools/setup.py b/tools/setup.py index 5793f455f50..239d18be7cf 100644 --- a/tools/setup.py +++ b/tools/setup.py @@ -14,7 +14,7 @@ setup( name='sigmatools', - version='0.19.1', + version='0.20', description='Tools for the Generic Signature Format for SIEM Systems', long_description=long_description, long_description_content_type="text/markdown", @@ -30,9 +30,8 @@ 'Topic :: Security', 'Topic :: Internet :: Log Analysis', 'License :: OSI Approved :: GNU Lesser General Public License v3 (LGPLv3)', - 'Programming Language :: Python :: 3.6', - 'Programming Language :: Python :: 3.7', 'Programming Language :: Python :: 3.8', + 'Programming Language :: Python :: 3.9', 'Environment :: Console', ], keywords='security monitoring siem logging signatures elasticsearch splunk ids sysmon', @@ -43,8 +42,8 @@ 'sigma.parser', 'sigma.parser.modifiers', ], - python_requires='~=3.6', - install_requires=['PyYAML', 'pymisp', 'progressbar2'], + python_requires='~=3.8', + install_requires=['PyYAML', 'pymisp', 'progressbar2', 'ruamel.yaml'], extras_require={ 'test': ['coverage', 'yamllint'], },