EventSentry Light full changelog

Bugfixes:
Agent: Fixed regression bug where anomaly filtering would not properly work when not filtering on the collector
Heartbeat Agent: Fixed issue where event ids 11011 and 11012 would be logged despite host being in a maintenance schedule
Management Console: Fixed issue where sysmon and script files would be saved as hidden files
Management Console: Fixed help button in sysmon management dialog
Management Console: Fixed rare issue where app would crash on startup
Web Reports: 2FA, when enabled, is now required during every login

Features:
Inventory:
Local users and group inventory
Local file share inventory
Security:
Keyboard inventory and new keyboard detection
Built-In Sysmon configuration management and deployment
Server-side anomaly detection
Better threat detection with threat-scoring
Port-Knocking for collector client
Process spoof (Masquerade) detection
ADMonitor:
Identify compromised and reused passwords
Improved "Who" lookup mechanism
Include domain with group policy changes
Web Reports:
Process Activity
2FA email authentication
Dashboard tile improvements
PWA support
Syslog RegEx results formatter
Misc:
EventSentray (tray utility) now includes an Activity Monitor
Process action can be triggered on collector
Ability to disable disk space monitoring alert throttling
Search event message in built-in event viewer

Features:
Agent: Fixed issue where, due to a recent update in various version of Windows, the wrong event category would sometimes be displayed for some events
Web Reports: Java 17.0.14 and Tomcat 9.0.98

Bugfixes:
Management Console: Fixed issue where not all package types would be displayed when assigning packages under some circumstances
Management Console: Various stability improvements
Various bug fixes related to assigning packages
Installer: Fixed issue when setting up the EventSentry database on a Microsoft SQL Server
Collector: Security improvements
Heartbeat Agent: Stability Improvments

Bugfixes:
Agent: Fixed issue where agent would restart itself on some hosts due to an internal error in the event log engine
Management Console: Event Viewer: Fixed system32 link for EventSentry events

Bugfixes:
Management Console: Fixed regression bug that resulted in the built-in event viewer to not properly work

Features:
Management Console: Various minor usability improvement through the management console
Management Console: PostgreSQL Optimization dialog has been improved and includes disk speed test feature
Bugfixes:
Management Console: Fixed issue where event parameters configured for the process action would not persist
Agent: Fixed SQL error with permission inventory when not using the collector
Agent: Added preliminary detection for event formatting problems
Built-In database upgraded to PostgreSQL v14.13
pgAdmin upgraded to v8.10

Features:
Management Console: Creating 64-bit MSI agent installers no longer requires the WiX toolkit to be installed
Management Console: Multiple entries can now be pasted into the file monitoring inclusion/exclusion dialog
Management Console: Package assignment dialog, in the context of a network device, will only show system health packages
Bugfixes:
Agent: Fixed bug where recurring filters would not work under certain circumstances
Agent: Improved logon tracking performance with reverse DNS lookups
Management Console: Fixed issue where package download would re-download packages with the same name, causing corruption
Management Console: Added additional options to PostgreSQL optimization dialog
Management Console: Fixed bug where settings from environment dialog would not be saved
Management Console: Fixed UI bugs on event log filter dialog that would cause crash
Management Console: Fixed issue where a performance counter that is copied would not be monitored
Collector: Stability improvements
Installer: Improved input validation for posgres admin password
Other minor fixes and improvements

Bugfixes:
Agent (Non-Collector): Fixed issue where the agent would use up an excessive amount of memory when using either Registry Tracking or Sysmon Integration and the configured database becomes unavailable
ADMonitor: Fixed issue where the nightly archival process would not run when invalid files are encountered
Configuration Assistant: Fixed issue where initialize a PostgreSQL database would sometimes require 2 attempts due to a missing schema
Management Console: Fixed issue when applying certain JSON filters
Network Services / NetFlow: Fixed issue where not configuring any conditions but having an AND evaluation logic would result in alerts being logged
Web Reports: Fixed issue hovering on Performance Trends with multiple datasets under certain circumstances