• Added a new column for normalized QNAME (convert upper cases to lower cases) for better grouping

Add packet parsing support for RR types:

• DNSKEY
• DS
• RRSIG
• NSEC
• NSEC3
• NSEC3PARAM
• TKEY (Limited)
• TSIG (Limited)

Limited: Does not support key and MAC parsing due to the complexity to implement Kerberos message parsing🤔

• Supports PacketData parsing in row details

• Add RemoteAddr column for better conversation grouping
• Add Interpreted Flags column for better readability
• Revert ElapsedTime field unit back to milliseconds after testing

• Switch ETW processing lib from Microsoft.Windows.EventTracing to Microsoft.Diagnostics.Tracing.TraceEvent.
• Input trace does not need merging as TraceEvent supports manifest.
• Switch WPA plugin framework to data-processing pipeline.
• Fixes wrong XFR_NOTIFY_OUT field mapping.

Initial release