v4.2.2
This update adds a new "missing" lookup to ignore as it is used by some detections in the latest release of security_content / ESCU.
It also removes the optional words Deprecated/Experimental/RIR from action.correlationsearch.label field in savedsearches.conf. This could cause labels which are too long and provide poor experience in Enterprise Security.
What's Changed
- SA Admon lookup exclusion by @patel-bhavin in #210
- make labels a bit shorter by @pyth0n1c in #211
Full Changelog: v4.2.1...v4.2.2