Describe the enhancement:

There is a update to the CEF specification and we should update our decode_cef processor to account for any changes.

We need to analyze differences between the two to see what changed. There's a CEF:1 described in this v26 document. We need to check if there were any breaking changes that need special handling or if there were only additions (like new keys names, e.g. customerKey).

• v25
• v26
• v27