New

• WinRM collection added. Commands executed over WinRM are now collected as part of ACES logging.

Improved

• Added mitigation checks. We added mitigation checks for Log4Shell checks on Unix based systems.
• Improved AWS discovery connection. The tags input on the AWS discovery connection now allows 1000+ characters, additionally the error message wording has been clarified.

Fixed

• Manual scan target lists are now provided when using the AWS Pre-Auth Scan Engine to perform ad-hoc scans.
• The Azure UUID and any changes made to the UUID now display correctly on the asset page.
• The check for Windows account password expiration no longer fails.
• The remote Log4Shell check no longer causes scans to fail on Windows scan engines.
• Empty lines in a command’s output are now supported by the Scan Engine.
• MSSQL 2016 fingerprinting now correctly differentiates between SP2 and SP3.
• CIS benchmarks for Microsoft Windows now report correct results for the ‘Network access: Allow anonymous SID/Name translation’ rule.