v0.2.0

What's Changed

• Chore workflow by @frack113 in #5
• Add new modifiers support by @wagga40 (fieldref, exists, cased)
• Remove Python 3.8 support and update workflow and tests by @wagga40

About Correlation rules support

Correlation rules need a timespan field in order to work correctly. For now, there is no simple and generic way to implement it with SQLite. To be honest, given that there are nearly no correlation rules in the official rules repository, I don't think this is a problem at the moment.

v0.1.2

What's Changed

• Update dependencies by @frack113 in #3

New Contributors

• @frack113 made their first contribution in #3

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• Add finalize_output for zircolite format by @wagga40 in #2

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Initial release