Update to releasenotes
@@ -7,16 +7,17 @@ RedELK release notes
* Renaming of many fields to be prepared for other C2 frameworks than Cobalt Strike. This concerns fields in the rtops index, the beacondb (now implantdb) and may other scripts.
* Adjusted legacy field names to adhere to ECS
* First step of support for PoshC2 C2 framework. Thanks @benpturner for the heavy lifting
-* Neo4J is now installed on the RedELK server.
-* Jupyter Notebooks is now installed on the RedELK server.
-* Made an installer switch for the elkserver installer to decide what to install (full experience incl Jupyter and Neo4J, or not)
+* Neo4J can now be installed on the RedELK server.
+* Jupyter Notebooks can now be installed on the RedELK server.
+* Made an installer switch 'limited' for the elkserver installer to decide what to install (full experience incl Jupyter and Neo4J, or not)
* Elkserver installer is now aware of amount of memory and adjusts memory settings of NEO4j and ES to optimized values.
* The credentials store of Cobalt Strike is periodically read, parsed and sent to the RedELK server where it is stored in a new index called credentials.
-* PS-Tools output is now parsed and stored in extra fields inside the rtops index
+* Outflank PS-Tools output is now parsed and stored in extra fields inside the rtops index
* Fixed double space bug in Apache catch-all Grok rule
* Integrated and adjusted chameleon.py (thanks @DomChell) for performing domain classification checks
* Fix for incorrect GeoIP ASN lookup when using an CDN
* Emails from IMAP mailboxes can now be ingested and dispalyed in RedELK
+* added Useragent info to incoming traffic on redirectors
