Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.15] [Request][8.15.4 & 8.16.0] Add RN summary about Defend bug fix (backport #6429) #6432

Merged
merged 2 commits into from
Jan 21, 2025
Merged

[8.15] [Request][8.15.4 & 8.16.0] Add RN summary about Defend bug fix (backport #6429) #6432

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5b43c2b
[Request][8.15.4 & 8.16.0] Add RN summary about Defend bug fix (#6429)
nastasha-solomon Jan 16, 2025
c2494a7
removes 8.16 rns
nastasha-solomon Jan 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/release-notes/8.15.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@
* Fixes a bug where {elastic-defend} could fail to properly enrich Windows API events for short-lived processes on older operating systems that didn't natively include this telemetry, such as Windows Server 2019. This could result in dropped or unattributed API events.
* Ensures that {elastic-defend} does not emit an empty `memory_region` if it can't enrich a memory region in an API event. After this fix, {elastic-defend} removes these fields.
* Fixes an {elastic-defend} bug where Windows API events could be dropped if they contained Unicode characters that couldn't be converted to ANSI.
* Fixes a race condition that could allow an attacker with administrative rights to disable {elastic-defend} on Windows. We would like to acknowledge Sean Moore (@Fr0g) at https://strafecybersecurity.com[strafecybersecurity.com] for their assistance.

[discrete]
[[release-notes-8.15.3]]
Expand Down
Loading