threathunters-io/laurel v0.6.5

on GitHub

New features and fixes:

• Processes running as part of systemd services get service information added as part of the PID enrichment (#243)
• Translate IO_URING operations (like auditd 3.1+) (#248)
• Option to use a prefix instead of capitalized key names for enriched/translated data (#245)
• Improve process tracking reliability by handling SYSCALL audit messages as early as possible (#238)
• Improve caching in user/group lookups (#249)