v2.2.1

Release Notes

Enhancements

• #60d965c: Bump github.com/sirupsen/logrus from 1.4.1 to 1.9.3
• #f0b9a4f: Disables quoting for all values in the log messages
• #f410e6a: Dump events in rule matches
• #092923b: Show Fibratus version in logs
• #7a25286: Improve Vulnerable or malicious driver dropped rule
• #dee37b7: Introduce open_remote_thread rule macro
• #ca70858: Reduce Potential SAM hive dumping false positives
• #cdf7f5f: Reduce Unsigned DLL injection via remote thread false positives

Bug fixes

• #3517665: Fix the path of the systray server binary
• #f7608c5: Set systray server named pipe security descriptor
• #dffe9b4: Disable alert senders in capture replay mode
• #e9be320: Resolve indentation mess-up in Yara config and allow systray sender
• #48c1dc5: Compose attachment text with alert title and text