-
Adding
vulnerability
option for event.category
. #2029
-
Added
device.*
field set as beta. #2030
-
Added
tlp.version
to threat #2074
-
Added fields for executable object format metadata for ELF, Mach-O and PE #2083
-
Added
CLEAR
and AMBER+STRICT
as valid values for threat.indicator.marking.tlp
and enrichments.indicator.marking.tlp
to accept new [TLP 2.0](https://www.first.org/tlp/) markings #2022, #2074