v1.0.8

• Hotfix: misspelled command in documentation
• Optimization: VarStruct init with pre-calculated parameters

v1.0.7

• Documentation grammar and style improvements
• Syntax sugar: omitted schema inference (data source and analytics) if only one schema
• Temporary store view removal if not in debug mode

Summer Day

Multiple fixes and improvements.

Process entity recognition is large improved in this release. Now it uses pid or name as pre-filter in prefetch, and then use first_observed and last_observed time to filter prefetched processes with comprehensive logic. The logic works on both Windows and Linux data sources.

Periodic Fixes And Improvements

• Fix FIND with network-traffic error
• Add debug flag to env variable
• Add hunting GIF to README

Multiple Improvements

1. GitHub actions on unit testing and code checks
2. More comprehensive entity identification logic
3. Documentation typo fixes

Critical Bug Updates

• Fixed

  • Fix the timestamp parsing issue #6
  • Fix version: pypi/support#214

• Added

  • Add proper exception to non-existent variable #8
  • Add three issue templates #10
  • Add GitHub Action to publish to Pypi

First Release

Open sourcing Kestrel Threat Hunting Language.

This is an alpha version release.