New features:
- SIEM: Add input filters.
Improvements:
- Commands: Run multiple commands concurrently (can be limited via config).
- IDS: Improve performance by up to ~33%.
Issues fixed:
- Agent: Disconnect and warn when the platform detects another connection from a different machine with the same host ID.
- SIEM: Fix deadlock on agent exit due to collector init block.
- Software (Windows): Record multiple locations of software found via extended software monitoring.
- Agent (macOS): Ensure old binaries are cleaned up properly.
- IDS (Linux): Fix potential deadlock when closing the IDS backend.
- Shield: Don't create an internal API FQDN allow rule if a proxy is used to avoid DNS errors.
- Processes: Always refresh all process information once per minute to avoid stale data.
- Agent: Wait for previous instance(s) of Pulsar to exit before starting.
- Software (Windows): Ensure extended software monitoring scan interval is always respected regardless of on-disk cache file modification time.