v0.0.10

What's Changed

• Upgrade Winlogbeat to v8.x by @caffeinatedpixel in #69
• Update shell-lib (docker compose @v2) by @caffeinatedpixel in #70
• Switch from Debian Stretch to Buster by @Zalgo2462 in #72
• Don't use sudo when calling install_docker.sh to fix ./docker permissions by @Zalgo2462 in #73
• Add add_host_metadata processor to winlogbeat v8 fresh configs by @Zalgo2462 in #75

Full Changelog: v0.0.9...v0.0.10

v0.0.9

• Fix X509_V_FLAG_CB_ISSUER_CHECK error when installing docker-compose: activecm/shell-lib#29
• Fix RHEL 7.9 installation: activecm/shell-lib#27
• Enable RHEL 8 compatible installations: activecm/shell-lib#30

v0.0.8

• Ensures that Docker is not installed via Ubuntu snap (#60)
• Fixes bug when parsing sestatus output on newer versions of RHEL (#60)
• Set minimum TLS version to 1.2 in winlogbeat config (#63)
• Ensure tzdata is installed on systems running Espy (#64, #66)

v0.0.7

• (#49, #50, #57) Update bundled version of shell-lib
• (#47) Add support for DNS logging using Sysmon
• (#48, #52) Add support for upgrading Sysmon configs and partial support for upgrading Winlogbeat configs
• (#54) Set TLS API calls to use TLS 1.2 in order to support Windows 2016

v0.0.6

Fix issue with installing to /tmp directory that is mounted as noexec (#43)

v0.0.5

Changes:

• Updated shell-lib module (#41)

v0.0.4

• Updating shell lib module (#40)
• shell-lib submodule uses https instead of ssh

v0.0.3

Changes:

• Check to see if the agent script was run with administrator privileges and, if not, restart the script with elevated permissions (#39)
• Set ACLs of ProgramData\winlogbeat to those of ProgramFiles\winlogbeat* (#39)

v0.0.2

Changes:

• Prevent docker version unsupported warning (#33)

v0.0.1

Initial release for espy