v0.6.0
Released
Feature
Security Packs, PII Masking & Keyboard Shortcuts
Host security detection packs with MITRE ATT&CK mapping, PII masking at ingestion, rate-of-change alerts, keyboard shortcuts, and admin dashboard revision.
- 3 security packs with 15 MITRE-mapped rules
- PII masking with mask/redact/hash strategies
- Rate-of-change alerts with baseline detection
- Command palette and keyboard shortcuts
- Revised admin dashboard with health monitoring
Added
- Host Security Detection Packs — 3 packs (Antivirus & Malware, Rootkit Detection, File Integrity Monitoring) with 15 rules total, MITRE ATT&CK mapped
- PII Masking at Ingestion — Content patterns (email, credit card, phone, SSN, IPv4, API keys), field name masking, custom rules, three strategies (mask, redact, hash with per-org salt), Settings UI with live test panel
- Keyboard Shortcuts — Command Palette (Ctrl/Cmd+K), Help Modal (?), sequence navigation (G+D/S/A/P/T/E/R/X), search shortcuts, first-time toast
- Admin Dashboard Revision — Health status cards, 24h activity timeline, 8 stat cards, System Health page with database/pool/Redis diagnostics
- Rate-of-Change Alerts — 4 baseline methods (same_time_yesterday, same_day_last_week, rolling_7d_avg, percentile_p95), anti-spam, frontend baseline picker
- Timeline Event Markers — Alerts and security detections shown on log timeline chart
- Version Update Notifications — GitHub release checking with 6-hour cache and release channel setting
Fixed
- Sigma API missing tags and MITRE fields
- Badge components stretching in containers
- Client errors (4xx) returning 500 instead of correct status
- Log Context metadata expanding dialog infinitely
- Email logo not rendering in Outlook/Gmail
- Continuous Aggregates showing “Refresh: unknown”
- Charts not resizing on sidebar toggle (switched to ResizeObserver)