Release Notes for Snare Windows Agent v5.5.2

Snare Windows Agent v5.5.2 was released on 14th December 2021.


Bug Fixes

  • Snare Agent now appropriately handles duplicate XML keys in Windows events when sending events in Snare v2 or SYSOG JSON formats. Such duplicated XML keys can be found, for example, in Active Directory events with eventID 2041 that can have multiple <Data> nodes.

    Compatibility Note: when sending such events to Snare Central using Snare v2 format, please ensure Snare Central v8.4.2 or newer is used. 

User Guide

For an up-to-date version refer to the online version here.