v4.0.0
Changes:
- Replace reflect with type assertions in import (#586)
- Speeds up the import.
- Update threat intel feeds (#581)
- Reduces false positives in threat intel/blacklist results.
- Support Parsing Zeek Logs Collected By Multiple Remote Agents (e.g. Sysmon) (#591)
- Allows integrating with Sysmon logs through espy.
This release includes breaking changes. There may be incorrect results or errors if you try to use RITA v4 to read a v3 database or vice versa.