Malcolm v24.10.0

[mmguero]

Malcolm v24.10.0 contains fixes for a few regression bugs, minor improvements, and a few component updates.

v24.09.0...v24.10.0

• Features and enhancements
  • Enable Zeek's parsing of HTTP server and client header names as zeek.http.client_header_names and zeek.http.server_header_names
  • Bumped maximum field limit in OpenSearch templates from 5000 to 6000
  • Some documentation improvements
  • Build improvement: fall back to alternative Zeek .deb download URL (fall back to alternative Zeek .deb download URL idaholab/Malcolm#585)
  • Build improvement: limit threads for spicy build processes during Zeek package installation (limit threads for spicy build processes during Zeek package installation idaholab/Malcolm#571)
• Component version updates
  • Beats to v8.15.2
  • capa to v7.4.0
  • elasticsearch-dsl Python library to v8.15.4
  • Fluent Bit to v3.1.9
  • Logstash to v8.15.2
  • OpenSearch and OpenSearch Dashboards to v2.17.1
  • osd_transform_vis Dashboards visualization to v2.17.1
  • Spicy to v1.11.3
  • watchdog Python library to v5.0.3
  • Zeek to v7.0.3
• Bug fixes
  • Fix broken dashboards regression from v24.09.0 (some dashboards broken in v24.09.0 idaholab/Malcolm#588)
  • Fix Zeek-extracted files not getting saved to correct location for live Zeek capture (extracted files not getting saved to correct location for live Zeek capture idaholab/Malcolm#590)
  • Fix for building Hedgehog Linux for Raspberry Pi 4 on an M2 MacBook

Official ISO installer images for Malcolm and Hedgehog Linux can be downloaded from Malcolm's releases page on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split into 2GB chunks and can be reassembled with scripts provided for both Bash (release_cleaver.sh) and PowerShell (release_cleaver.ps1). See Downloading Malcolm - Installer ISOs for instructions.

---

This discussion was created from the release Malcolm v24.10.0.