Improvements:
- SIEM: Add compressed "cold storage" tier to Transaction Log to increase retention and mitigate disk overflow.
Issues fixed:
- IDS (Windows): Set direction metadata in Shield logs.
- Software (Windows): Prioritize cache and on-disk inventory for Advanced Software Monitoring before (re-)crawling disk.