v0.5.0
What's Changed
Added
- better examples
- markdown link checker
desktop-notifier
module- event monitor API endpoint
monitor
command onpulsar
cli- scripts to ease development
- support for kernel 6.x
LOOP
macro to handle loops withbpf_loop
on supported kernels
Changed
- improve test suite
- better daemon/logger module output format
- new threat event structure to support derived, custom, empty payloads
- send eBPF events in a more memory efficient way
- move pulsar to workspace root package
Fixed
- sporadic segmentation fault when running test-suite
- track parent process changes
- module/crate version coherency
- startup warnings in ebpf programs
Removed
- non core payloads from payload variants
Check out the changelog for details on all the changes and fixes.