EventSentry Light full changelog

Features:
Management Console: Added button that creates JSON syntax of any event log filter
Management Console: Event Log Summary is now available for remotely connected event logs
Bugfixes:
Agent: Fixed issue where agent would continue to use memory if process tracking is enabled and no 4689 events are logged
Agent: Improved file signature detection in process tracking
Collector: Fixed issue that would affect stability
Collector: Fixed issue where collector would crash if the configuration contains one or more disabled actions
Various bug fixes and performance improvements in multiple components
Web Reports: Fixed host selection while refreshing Host Inventory

Bugfixes:
Agent: Fixed issue with long Sigma rules not being deployed
Agent: Optimized performance monitoring engine
Agent: Performance & stability improvements
Agent: Validation scripts now support platform for optimized execution on endpoints
Collector: Fixed issue where network stack of collector would freeze under rare circumstance
Management Console: Fixed issue where unassigning the last package would not be saved
Management Console: Various UI tweaks for better usability
Sync Service: Fixed issue where automatically refreshing validation scripts would remove newly added user scripts

Features:
Add ability to associate a database action as an archive database with another database action
Web Reports: Acknowledge tile now supports toggling fields and applying RegEx for custom fields
Bugfixes:
Agent / File Monitoring: Fixed issue where agent service would not start when using wild card for folder names that expands to more than 96 directories
Agent: Fixed issue where agent would not accept a config update sent by the collector under rare circumstances
Agent: Fixed issues with database action when not using the collector
Agent: Fixed regression bug where 250 largest files would not display correctly on some hosts with more than one logical drive
Built-In database upgraded to PostgreSQL v14.22
Collector: Fixed issue where collector may not be able to bind to configured port when the service is restarted
Collector: Reduced number of database connects/disconnects
Heartbeat Agent: Fixed bug when applying custom SNMP timeouts
Management Console: Fixed issue where app would start on hosts with large number of event logs / event sources
Management Console: Fixed regression bug where viewing insertion strings in content filter dialog would not work
Management Console: Minor fixes and improvements
Management Console: Support package script was improved

Bugfixes:
Agent: Fixed issue where /collectortest command line flag would not work
Agent: Fixed issue where sending events via email with EventSentry attachments would crash agent when not using the collector
Collector: Fixed issue where collector would sometimes crash when submitting emails to Office365
EventSentray: Fixed issue where elevation prompt would be displayed in a loop
Network Services: Optimized DNS in NetFlow component
Web Reports: Fixed OS summary on Hardware Inventory
Web Reports: Optimized password update process
Web Reports: Resolved timezone offset for Application Memory instances on Performance Trends

Features:
Collector: Digital Log Signing
Installation: New Host Alias option
Installation: Separate Installer for Heartbeat / Network Services / Collector
Native Azure Log Import
Network Services: HTTP Event Collector (HEC)
New Sync Service with Validation Script Updater
OAuth support for email and http actions
Support for Sigma Rule Syntax
Web Reports: Anomaly Baseline
Web Reports: Improved Auto-Complete & Predictive Search Menu
Web Reports: Location Filtering
Web Reports: Native HTTPS Support
Web Reports: Visual Map for Switch Port Mapping
Bugfixes:
Agent: Performance Improvement for 250 Largest File Enumeration
Web Reports: Dropped support for Internet Explorer

Bugfixes:
Agent: Fixed issue where Hyper-V based virtual machines from a German OS would not show up in the VM Inventory
Agent: Fixed issue where keyboard inventory would not show up in the web reports when not using a collector
Built-In database upgraded to PostgreSQL v14.20

Bugfixes:
ADMonitor: Vastly improved performance for extremely large domains (100,000+ users)
Agent: Fixed issue where agent would not start up if the system temp directory was extremely large or contained a lot of files
Agent: Improved file checksum monitoring (FIM) when monitoring large amounts of files
Agent: Stability improvements
Collector: Various stability and scalability improvements
Management Console: Improved content filter editing in event log filters for custom event logs and added missing conditions
Management Console: Improved license dialog
Web Reports: Faster database server name resolution under Azure
Web Reports: Fixed CSV output with varied locale delimiters
Web Reports: Update Tomcat to 9.0.111

Features:
Web Reports: Added YouTube tile
Management Console: Added ability to sort Syslog filter list
Management Console: Added ability to drag & drop content filters
Bugfixes:
General: Security feature to only store local groups and packages now filters actions as well
General: TLS communication can be configured to utilize Windows-API, supporting FIPS mode if enabled in the OS
Agent: Fixed issue were filters with multiple summary schedules configured for the same time would not reliably work
Agent: /collectortest command line variable now supports multiple collectors
Agent: Auto-Update now only uses net.exe to (re)start the EventSentry service
Agent: Switched all hashing algorithms to use Windows-API, utilizing FIPS mode when configured in the OS. Note: Requires re-indexing of all files by agent when FIM or File Access Tracking is being used.
Network Services: Improved parsing of CEF Syslog messages
Collector: Fixed issue with handle leak when internal named pipe cannot be created
Collector: Fixed issue where "Trusted Host" setting would not always reliably work
Collector: Fixed issue with HTTP action not resolving certain variables and not logging activity to the action history log
Collector: Now detects a frozen network stack and performs an automatic service restart
Collector: Fixed several issues with the file action. Added better processing of variables, file locking and events auditing file activity.
Heartbeat Agent: Fixed incompatibility issue when security feature "Store only local groups ..." is enabled
Heartbeat Agent: Fixed issue where service would attempt to connect to the database even if configured to use the collector
Management Console: Show warning when database is not on the latest schema
Management Console: Several fixes and optimizations
Web Reports: Fixed frequency chart timezone calculation
Web Reports: Tomcat updated to v9.0.106

Bugfixes:
EventSentray: Fixed issue where clipboard alert dialog would not be shown and events 2000/2001 would not be written to event log under some circumstances
EventSentray: Fixed Internet Test dialog that would only show a scroll bar under some resolutions
Management Console: Various minor improvements to list control columns throughout the application
Collector: Improved stability of service shutdown routine
Web Reports: Update Tomcat to 9.0.104

Bugfixes:
Agent: Fixed regression bug where anomaly filtering would not properly work when not filtering on the collector
Heartbeat Agent: Fixed issue where event ids 11011 and 11012 would be logged despite host being in a maintenance schedule
Management Console: Fixed issue where sysmon and script files would be saved as hidden files
Management Console: Fixed help button in sysmon management dialog
Management Console: Fixed rare issue where app would crash on startup
Web Reports: 2FA, when enabled, is now required during every login