Added
- Added new rules to support the new Windows eventchannel decoder. (#247)
- Extend Auditd decoder to support more fields. (#256)
- Added rule to alert when an agent is removed. (#2127)
Changed
- Now CDB lists are not prebuilt in the repository. (#249)