Version 5.7.5

Bug Fixes:

• #1128 Taxii2 connector failing because of missing parameters?
• #1123 taxii2.py fails to get date_added from manifest since objects list is empty, since version 5.7.0

Pull Requests:

• [google-dns] Optimize SDO read to not query Minio/S3 by @ckane in #1127
• [Taxii2] Bugfix for no manifest available by @annoyingapt in #1130
• [MWDB][ELASTIC(stream)] Mwdb: major fix + SSL verify, Elasticsearch: fix of the flag ELASTICSEARCH_REDUCED_PRIVILEGES by @aaarghhh in #1132
• export Data-source & Data-component (#issue/3328) by @yassine-ouaamou in #1137

New Contributors:

• @yassine-ouaamou made their first contribution in #1137

Full Changelog: 5.7.4...5.7.5

Version 5.7.4

No changelog for this release.

Pull Requests:

• Update shodan-idb connector by @rlynch-ironnet in #1121
• [Mandiant] Bug fix for mscore implementation by @annoyingapt in #1125

Full Changelog: 5.7.3...5.7.4

Version 5.7.3

No changelog for this release.

Pull Requests:

• Introduce the Google DNS connector by @mattreduce in #1117
• [Taxii2] Custom labels by @annoyingapt in #1113
• Small improvements in Sekoia.io connector by @Darkheir in #1116

Full Changelog: 5.7.2...5.7.3

Version 5.7.2

No changelog for this release.

Pull Requests:

• Hygiene: Bump depdencies and update Lists by @rhaist in #1105
• [taxii2] Fixed bug for compatibility with taxii 2.1 by @annoyingapt in #1106

Full Changelog: 5.7.1...5.7.2

Version 5.7.1

No changelog for this release.

Full Changelog: 5.7.0...5.7.1

Version 5.7.0

Enhancements:

• #1095 [Virustotal Downloader] Increase Confidence Level to High
• #1086 Modularization of relation refs
• #1080 [Sentinel] Stream connector to use a stream ID
• #1079 Add CaseRfi and CaseRft to export files
• #1024 [TAXII2 Client] Use Pagination
• #1014 [misp] Add an option to enforce warning lists when searching events / attributes
• #932 [misp] Guess threats using tags
• #756 [YARA search] Create the enrichment connector for artifacts
• #736 [Mandiant] Mscore is not taken into account

Bug Fixes:

• #1082 [Sentinel] Stream connectors needs a try and catch processing the message
• #1058 [connector-cape] fail to parse json when analysis report found clamAV signature

Pull Requests:

• Update Dockerfile by @lamtn1 in #1061
• Update flake8 line length to 120 by @SYNchroACK in #1077
• Update .env.dist by @lamtn1 in #1062
• Connector cape fix clamav json structure by @aakloul in #1057
• IPQS Fraud and Risk Scoring Connector by @RamboV in #1065
• [connectors] remove Case in export files and Add feedback and Case Incident by @SarahBocognano in #1097
• [taxii2] Added pagination to taxii connector by @annoyingapt in #1091
• [mandiant] Added mscore to mandiant connector by @annoyingapt in #1090
• [Sentinel] adding a try to avoid crashing the container whenever it c… by @RaulSokolova in #1093
• [ivre/shodan] Migrate Stix Cyber Observable Relationship to Stix Ref Relationship by @RomuDeuxfois in #1087
• [connectors] Add CaseRfi and CaseRft to export files (#issue/1079) by @SarahBocognano in #1098
• [internal-enrichment][LastInfoSec] We are now able to contextualize url also by @remydewa in #1089
• [Virustotal Downloader] Increase Default Confidence Level to 100, resolves #1095 by @YungBinary in #1096
• Introduce the YARA connector by @mattreduce in #1094

New Contributors:

• @lamtn1 made their first contribution in #1061
• @RamboV made their first contribution in #1065
• @annoyingapt made their first contribution in #1091

Full Changelog: 5.6.2...5.7.0

Version 5.6.2

Pull Requests:

• Connector-Urlhaus -- Caching and state output by @sommerda in #1026

Full Changelog: 5.6.1...5.6.2

Version 5.6.1

No changelog for this release.

Full Changelog: 5.6.0...5.6.1

Version 5.6.0

Enhancements:

• #935 [MWDB] Disabling SSL Verification

Bug Fixes:

• #1047 [MISP] Fix text observable values
• #1040 MISP connector crashing with "TypeError"
• #1045 MISP connector crashing with "TypeError"
• #1037 [misp-connector] current_page type None
• #1051 Errors when importing Stix
• #1023 [sentinel] STREAM connector issues
• #1020 [mandiant] Error in connector
• #983 Elastic Connector - passing a wildcard () to the get API (e.g. GET /metricbeat-/_doc/1) which is not allowed
• #978 [virustotal-livehunt-rules] Fails to display error message.
• #965 [VirusTotal Enrichment] Errors out when enriching Domains, IPs and URLs
• #960 [URLScan] Connector errors out with: 'NoneType' object has no attribute 'split'
• #941 STIX Connector not importing all data / breaking import page on 5.5.3
• #931 [ExportReportPDF] Cannot export PDF file because StixCoreObject class does not have a read method
• #859 [cisa-known-exploited-vulnerabilities] - Nothing created from connector

Pull Requests:

• Update build dependencies for shodan-internetdb, import-file-stix by @ckane in #1025
• Improve OpenCTI Datasets connector by @SYNchroACK in #988
• Improve MITRE Datasets connector by @SYNchroACK in #987
• Connector-Elastic - shifted _alias print statement to valid position by @sommerda in #1027
• Optimize SDO .read() operations in [hygiene] and [shodan-internetdb] enrichment connectors by @ckane in #1028
• [urlhaus] & [malwarebazaar] Minimize data from SDO read() operation by @ckane in #1031
• Update Sentinel connector by @The-Stuke in #1041
• Connector-Elastic -- implemented URL-stix2-parsing and checks by @sommerda in #1029
• Connector-Mandiant -- reduced errors due to 'redacted' content by @sommerda in #1030
• [import-document] [import-file-stix] Update version of dependencies by @ckane in #1033
• Set user agent for crowdsec connector to crowdsec-opencti/v1.0.0 by @sbs2001 in #1034
• version 1.0.1 of RF Notes connector by @Jonah-RF in #1043
• Socprime connector fix by @vu-socprime in #1053

Full Changelog: 5.5.4...5.6.0

Version 5.5.4

Bug Fixes:

• #1018 [mitre] CAPEC STIX data doesn't get ingested
• #944 CISA crashes when a null createdBy is present

Pull Requests:

• [Mitre] Fix CAPEC URL for STIX data by @akshaysth in #1019
• [connectors] Txt location export bug fix (#2821) by @Archidoit in #1017
• CrowdSec: Update the error message for quota exceed by @sbs2001 in #1015
• [connectors] selected StixSightingRelationships export (#2735) by @Archidoit in #1016
• Microsoft Sentinel Connector Creation by @The-Stuke in #1012

New Contributors:

• @The-Stuke made their first contribution in #1012

Full Changelog: 5.5.3...5.5.4