3.6.0 release

[codeyourweb]

This pull request introduces several improvements and refactorings to the configuration system, event forwarding, and logging behavior, along with updates to documentation and example configuration files. The main highlights are the refactoring of the memory scan configuration option, enhanced event forwarding for grep and checksum matches, and improved test reliability for configuration loading.

Configuration Refactoring and Consistency

• Replaced the ScanMemory option with FindInMemory throughout the codebase, configuration struct (configuration.go), documentation (README.md), and all example configuration files for consistency and clarity. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]

Event Forwarding Enhancements

• Added new event forwarding functions for grep and checksum matches, including metadata such as line numbers for grep matches, and integrated these into the content and checksum scanning routines (event_forwarding.go, finder.go). [1] [2] [3]
• Improved event forwarder lifecycle management by using a sync.WaitGroup to ensure the forwarding goroutine exits cleanly when stopped. [1] [2] [3] [4]

Configuration Loading and Testing

• Refactored configuration loading to use strict YAML decoding with known fields only, removed the unused ConfigurationObject type, and added info-level logging when configuration is loaded. [1] [2] [3] [4]
• Improved the integration test for empty configuration files by running the test in a subprocess and checking for proper exit status, making the test more robust. [1] [2]

Logging and Versioning

• Increased default logging verbosity from 3 to 4 and updated the version string to 3.6.0 for better visibility and tracking. [1] [2] [3]

Documentation Updates

• Updated build status badges in the README.md to reflect new workflow file names for Windows and Linux builds.