Hi all, I’m excited to announce that Stratoshark 0.9.3 has been released! It includes the following changes:
-
The Windows and macOS installers now ship with “strato”, a command line tool similar to tshark.
-
The Windows and macOS packages now ship with the gcpaudit and k8saudit plugins.
-
The Falco Events dissector now adds IP geolocation fields alongside IPv4 and IPv6 address fields.
-
There’s a new “Plots” dialog that support scatter plots (this showed up in 0.9.2 but was omitted from the release notes).
If you’re investigating Falco events or diving into deep forensic workflows, this update brings more visibility, better tooling, and new ways to explore your data. Try it out, test the new features, and let us know what you think!