Commit Graph

439 Commits (1ff0ade5cbc4154e22e7c214b094ff69ba5a649e)

Author SHA1 Message Date
Iglocska 1ff0ade5cb Merge branch 'triple-dots' into hotfix-2.3.59 2015-04-08 22:41:54 +02:00
Iglocska 9f09d6d7e5 Merge branch 'cakeresque-queues' into hotfix-2.3.59 2015-04-08 22:37:30 +02:00
Iglocska 06f8a9bbd6 Merge branch 'proxy' into hotfix-2.3.59 2015-04-08 22:36:13 +02:00
Iglocska 348923691f Merge branch 'stix-info' into hotfix-2.3.59 2015-04-08 22:29:36 +02:00
Iglocska 094f932616 Merge branch 'disallow_unpublished_events' into hotfix-2.3.59 2015-04-08 22:22:22 +02:00
Richard van den Berg c49c387337 Only truncate string if adding ... will make it shorter 2015-04-08 14:08:38 +02:00
Richard van den Berg fa112d77c3 Use correct CakeResque queues 2015-03-23 17:58:41 +01:00
Richard van den Berg 2ccab722d7 Add proxy section to server diagnostics 2015-03-19 12:15:28 +01:00
Richard van den Berg 9e7ea8fe74 Add proxy support to SyncTool 2015-03-19 10:03:25 +01:00
iglocska 6763159e87 Security fix
- filenames are now enclosed by quotes instead of double quotes while executing the zip command via exec
2015-03-10 10:58:15 +01:00
Richard van den Berg d2556ff91d Use org name and baseurl in XML namespace for STIX 2015-02-19 15:46:54 +01:00
iglocska fbca80d680 Added more contextual info for the CSV exports, fixes #391 2015-02-16 14:47:21 +01:00
iglocska b5be1a36fb Correlation disabled for http-method, fixes #406 2015-02-16 13:30:15 +01:00
Richard van den Berg 12dc5b6579 Make unpublished events private if MISP.unpublishedprivate == true 2015-02-05 17:16:40 +01:00
Richard van den Berg d3c0144b25 Merge remote-tracking branch 'upstream/master' 2015-02-05 14:17:10 +01:00
iglocska 2401cedfdc Left off file in previous hotfix added
- added a file that was not pushed during the last hotfix
- some improvements to the XML export to lower memory usage
2015-02-04 11:06:41 +01:00
iglocska f0aa849d04 Various improvements to the exports
- Unified the way exports accept negated parameters
- Fixed the documentation
- Most exports are now restrictable by the event date (From/To parameters)
- none cached XML export now writes to file after converting each event, clearing the memory and resolving any potential memory issues
2015-02-03 17:06:05 +01:00
iglocska 1b4f2a6408 Password complexity definable by admin
- administrators can use a regex and a length setting to define password requirements
- old behavior used if left untouched
2015-01-27 10:41:43 +01:00
Richard van den Berg 253e579307 Disallow unpublished events 2015-01-27 10:10:22 +01:00
iglocska 6b6c62bd53 Fix to the new sync issues since 2.3.39, fixing #365
Incorrectly trying to look up authenticated user in the model fixed
2015-01-15 13:46:11 +01:00
iglocska cedaac360a Fixes to the scheduled tasks and some documentation issues
- Scheduled pulls should work correctly now
- Scheduled pushes and pulls correctly display in the logs
- Scheduled caching correctly sets the next date of execution
2015-01-12 17:35:08 +01:00
iglocska 92679f6b69 New way to download a single event
- The event export buttons have been unified into a single download as... button
- clicking it loads a popup with all of the export formats
- added snort, suricata, text dump to the export options
- added the option for an extra setting for some exports (such as including non IDS flagged attributes, encoding attachments)
- easily extendable system

- moved the hidden popup divs into the general layout, can be easily reused anywhere

- removed the auth refresh option that was re-enabled recently as it seems to sometimes cause issues

- text exports now allow "all" to be specified as type, which will dump all attribute values that the user can see
- text exports now allow restricting the results based on event id
2014-12-19 13:32:16 +01:00
iglocska 3723119d83 Logging of admin emails and auth refresh
- admin emails now generate log entries
- authentication is refreshed on activity
2014-12-12 10:42:12 +01:00
iglocska 71d36b9c64 Several issues fixed
- MYSQL.sql file now correctly includes the task entries
- GenerateCorrelation admin task is now a background job
- Organisation of events pulled now get the org in the server object as the owner instead of the one who initiates the pull
- Small fix to wrapping text in the pivot graph
2014-11-27 14:47:13 +01:00
iglocska 9fae7a2193 Alternate event org display
- shows both orgc and org to normal users
- naming convention changed (orgc => source org, org => member org)
- this should allow users to see if an event was generated on their instance or not.
2014-11-25 13:21:25 +01:00
iglocska 2c7b7415b9 Improvements to the attribute search
- case insensitivity
- tag searches

also, generatecorrelation is now a background job
2014-11-20 10:40:24 +01:00
iglocska 4b7e56a43c Fix to an issue with the CSV export
- missing linebreak after header row added
- fixed an issue with quotes in the value field not being escaped properly
2014-11-12 15:36:07 +01:00
iglocska 4568589044 File management added and various small changes
- Important! Logo images have now moved to a different location! Make sure that you update your settings!
- Site admins can now manage the uploaded image files and the terms of use file via the server settings interface
- add, link, delete files directly from the interface
2014-10-29 15:20:30 +01:00
iglocska 15fa296fdb Update to the terms and conditions
- use terms file as before if nothing else specified
- specify a file in the app/files/terms directory via the server settings tool
- specify whether to show it inline or create a download link for users instead
- by default everything is the same as before, except that the MISP installation path is no longer exposed by a non-existing terms file
2014-10-28 15:11:40 +01:00
iglocska 6d73409b90 Version check tool added
- check the latest tag on github and compare it to the local version
- from here on all hotfix, minor, major releases should be tagged apropriately.
2014-10-27 16:03:43 +01:00
iglocska 504527d36b Fixes to the proposal ajax mechanism for newer cakephp versions 2014-10-15 15:39:28 +02:00
iglocska 06ef98af40 Another change to the baseurl check 2014-10-02 11:06:08 +02:00
iglocska 0e2d8e9a55 Update to the baseurl check in the health tool
- https was checked incorrectly before
2014-10-02 11:00:30 +02:00
iglocska 5f69830d0b Incorrect naming fixed 2014-09-15 12:33:21 +02:00
iglocska eac25e3d3a Added the option to take ownership of an event uploaded via the Add MISP XML button
- server setting has to be enabled to allow for this
- can cause issues if the event gets synchronised with an instance that has a different creator organisation for the same event
- it is recommended not to use this, but in some cases it can be very helpful - the setting for it in the configuration is called MISP.take_ownership_xml_import
2014-09-15 12:30:26 +02:00
iglocska fc806b8919 Some missing tests added 2014-09-11 17:28:57 +02:00
iglocska 931bf75409 Merge branch 'feature/health' into develop 2014-09-11 14:55:05 +02:00
iglocska b69e51e867 No feedback from the failed numeric test for incorrect server settings 2014-09-11 13:02:38 +02:00
iglocska b178358f2a Default config.php added 2014-09-10 11:48:48 +02:00
iglocska 2521106254 Reworked the server settings for boolean settings and settings that have a few options as values.
- Toggles instead of free-text
2014-09-10 10:37:58 +02:00
iglocska 79127902b7 Cleanup, MISP health tool
- cleanup of a lot of deprecated settings
- tool to help assess and alter issues with the instance settings
- new mechanism to store settings
2014-09-10 09:43:22 +02:00
iglocska cef94553f7 Merge branch 'hotfix-2.2.39' into develop 2014-09-08 13:34:58 +02:00
iglocska 4c6ea92ba3 Small fix to avoid repeated incorrect invalid messages after the first failed check 2014-09-08 13:34:14 +02:00
iglocska c11b388f32 Merge branch 'hotfix-2.2.39' into develop 2014-09-08 13:24:26 +02:00
iglocska 2bb806d780 Fix to the PGP key validation tool, fixes #284 2014-09-08 13:23:23 +02:00
iglocska 83369da25a Several fixes including compatibility with the STIX to_xml() performance fix
- STIX export performance greatly improved thanks to 84ce8d8be6376797053668d68e1b863713f008dd
- some junk removed
- fixed some minor pagination issues on the event view
- site admin dummy event creator now has target-* type attributes
2014-08-28 14:27:45 +02:00
iglocska d118a22b53 Added event distribution to alert e-mail, fixes #127 2014-08-21 17:04:02 +02:00
iglocska be00fbebff Publishing now immediately sets the event to published. A failed push will keep the event published, but it will note that it failed in the jobs / flash message. 2014-08-21 16:53:03 +02:00
iglocska d5ac3dea49 Merge branch 'hotfix-2.2.37' into develop 2014-08-21 15:29:18 +02:00
iglocska b6ee897b82 Fixed an incorrect check for the no PGP key warning condition partially responsible for #271 2014-08-21 15:27:25 +02:00