8.11 Endpoint release notes

elastic / security-docs

Elastic Security Documentation

Other

61 stars 179 forks source link

8.11 Endpoint release notes #4005

Closed nastasha-solomon closed 10 months ago

nastasha-solomon commented 11 months ago

@roxana-gheorghe @magermark @jtnk @nfritts @jdu2600 @caitlinbetz

Filing this doc issue to track Endpoint changes that need to be documented in the Security release notes for 8.11. We specifically need to know about:

New features, enhancements, and bug fixes that were included
Breaking changes that were introduced
Known issues that were discovered

Examples of release note summaries can be found in the latest release notes. You can also ping us here if you have more questions. Thanks!

roxana-gheorghe commented 11 months ago

This is the list from endpoint team:

There is one more important item about controlled artifact update, but I believe Caitlin will mention this.

jdu2600 commented 11 months ago

This one is on track for the release -

https://github.com/elastic/security-team/issues/6727

Potential words -

Adds API events and corresponding detection rules for a number of Windows functions routinely abused by malware (#167549, #427).

cc: @magermark

ferullo commented 10 months ago

https://github.com/elastic/endpoint-dev/issues/13460 is not included in 8.11 (cc @kevinlog @roxana-gheorghe )