ECS 1.11 Changes

Added

• elf.* field set added as beta. Stage 2 changes for RFC 0015 - elf header ecs#1410
• Remove beta from orchestrator field set. Stage 3 changes for RFC 0012 - orchestrator field set ecs#1417
• Extend threat.* field set beta. Stage 2 changes for RFC 0018 - extending the threat.* field set ecs#1438
• Added event.agent_id_status field. Add field event.agent_id_status ecs#1454
• process.target and process.target.parent added to experimental schema. Stage 1 changes for RFC 0016 - process.target field reuse ecs#1467
• Threat indicator fields progress to beta stage. Stage 2 changes for RFC 0008 - threat indicator fields ecs#1471, Threat intelligence RFCs stage 2 addenda ecs#1504
• threat.enrichments beta fields. Stage 2 changes for RFC 0021 - Threat enrichments ecs#1478, Threat intelligence RFCs stage 2 addenda ecs#1504

Deprecated

• Note deprecation of the host.user.* field reuse. Add host.user.* deprecation notice in field reuse description ecs#1422
• Note deprecation of log.original superseded by event.original Implement Deprecation Notice relating to RFC 0017: Remove log.original ecs#1469