v0.3.0
🛡️ SIEM Dashboard & ⚡ Horizontal Scaling
This release introduces a complete Security Information and Event Management (SIEM) dashboard, C# SDK support, and horizontal scaling infrastructure.
✨ What's New
SIEM Dashboard & Incident Management (#5)
- New Security Dashboard at /dashboard/security with 6 real-time widgets:
- Summary stats (detections, incidents, open, critical)
- Top threats chart (Sigma rules by detection count)
- Detection timeline (time-series visualization)
- Affected services list
- Severity distribution pie chart
- MITRE ATT&CK heatmap
- Complete incident lifecycle: open → investigating → resolved → false_positive
- Automatic incident grouping by trace ID and time window
- Comments thread and activity history
- PDF report export for incident documentation
C# / .NET SDK (#9)
- Official C# SDK for LogWard integration
- Configure via URL, port, and API key without modifying existing logging calls
Horizontal Scaling Support (#20)
- Stateless backend architecture (all state in Redis/PostgreSQL)
- Multiple backend instances can run simultaneously
- BullMQ worker scaling with concurrent job processing
- Updated docker-compose.yml to support multiple replicas
- Health check endpoint for load balancer integration
🐛 Bug Fixes
- Fix Docker build on Alpine 3.23 (postgresql16-client package naming)
- Fix time window boundary race conditions in incident auto-grouping
- Fix SSE endpoint test timeouts
Full Changelog: v0.2.4...v0.3.0