diff --git a/README.md b/README.md index 8016d2fcc..ca6f12699 100644 --- a/README.md +++ b/README.md @@ -31,6 +31,12 @@ Security Onion 2.0.0 RC1 is here! This will require a fresh install but there is - Once authenticated through SOC, you can now access Playbook with analyst permissions without login - Ingest parsing updates for Windows Eventlogs & Sysmon logs shipped with WinLogbeat & Osquery (ECS) - Kolide Launcher update to include the ability to pass arbitrary flags - new functionality sponsored by SOS +- Fixed issue with Wazuh authd registration service port not being correctly exposed +- Added option for exposure of ES Rest API (port 9200) to so-allow for easier external querying/integration with other tools +- Added option to so-allow for external Strelka file uploads (ex. via `strelka-fileshot`) +- Added default YARA rules for Strelka -- default rules are fmaintained by Florian Roth and pulled from https://github.com/Neo23x0/signature-base +- Added the ability to use custom Zeek scripts +- Improved unification of Zeek and Strelka file data ## Hybrid Hunter Beta 1.4.1 - Beta 3