We've just released Tenzir v4.2 that introduces two new connectors: S3 and
GCS for interacting with blob storage and ZeroMQ for writing
distributed multi-hop pipelines. There's also a new lines parser for
easier text processing and a bunch of PCAP quality-of-life improvements.
After our successful launch of app.tenzir.com of Tenzir v4.0 at
Black Hat, the new v4.1 release continues with several
enhancements based on early feedback. We bring to you a (i) new mechanism to
pause pipelines, (ii) a new operator to match Sigma rules, (iii) new operators
for in-pipeline (de)compression, and (iv) a revamp of the show operator.
VAST v3.0 is out. This release brings some major updates
to the the VAST language, making it easy to write down dataflow pipelines that
filter, reshape, aggregate, and enrich security event data. Think of VAST as
security data pipelines plus open storage engine.
We released VAST v2.2 🙌! Transforms now have a new name:
pipelines. The summarize
operator also underwent a facelift,
making aggregation functions pluggable and allowing for assigning names to
output fields.