Commit Graph

24007 Commits (78dcc16ca67360059e35e59ad6083e948fdee5b7)

Author SHA1 Message Date
Christian Studer 08bcb0f619 Merge branch 'develop' of github.com:MISP/MISP into develop 2023-03-14 11:29:30 +01:00
Alexandre Dulaunoy 96734dc481
Merge pull request #8951 from fukusuket/fix-install-guide-doc-links
fix: install guide links
2023-03-14 06:05:05 +01:00
Raphaël Vinot 8af1f27a02
Merge pull request #8952 from MISP/composer_fix
chg: update GHA to fix composer, maybe.
2023-03-13 18:37:06 +01:00
Raphaël Vinot ffb6246de3 chg: Order for tests. 2023-03-13 17:13:05 +01:00
Raphaël Vinot a70977f8de Merge branch 'develop' into composer_fix 2023-03-13 15:49:40 +01:00
iglocska d2ed1175bd
Merge branch '2.4' into develop 2023-03-13 15:36:05 +01:00
iglocska e48e7037f9
fix: [testlive security] change the test org name to not include spaces
there's a lookup via orgname in the URL that causes the tests to fail otherwise
2023-03-13 15:33:28 +01:00
Raphaël Vinot b5342dd167 chg: update GHA to fix composer, maybe. 2023-03-11 15:32:58 +01:00
Raphaël Vinot d1977f5375 chg: Bump ubuntu version to use 2023-03-11 14:25:14 +01:00
fukusuket 8c9f00bfad fix: install guide links 2023-03-11 08:50:02 +09:00
iglocska af516ed534
Merge branch 'develop' into 2.4 2023-03-10 22:13:16 +01:00
iglocska ddd9700b99
Merge branch 'develop' of github.com:MISP/MISP into develop 2023-03-10 14:31:25 +01:00
iglocska e77a4fced7
fix: [php7.2 compat] make 7.2 happy with no trailing comma in the funciton params 2023-03-10 14:30:20 +01:00
Raphaël Vinot 68c130a099 chg: Bump PyMISP 2023-03-10 15:14:22 +02:00
iglocska ba63fc217f
chg: [version] bump 2023-03-10 14:00:54 +01:00
iglocska 51546c8c7d
chg: [db_schema] version bump 2023-03-10 14:00:18 +01:00
iglocska 58ba5260f5
chg: [db_schema] update 2023-03-10 13:59:12 +01:00
iglocska 7fa48b8772
chg: [vendor dir check diagnostic] made the execution optional if the required package is missing 2023-03-10 13:56:03 +01:00
Christophe Vandeplas eefb1fc32a Merge branch 'develop' of https://github.com/MISP/MISP into develop 2023-03-10 13:16:36 +01:00
Christophe Vandeplas 5b1bc40ba0 chg: [diagnostics] Report on Vendor dependencies 2023-03-10 13:14:39 +01:00
Sami Mokaddem 8dbcd43b42
Merge branch 'pr-8948' into develop 2023-03-10 11:22:16 +01:00
Sami Mokaddem a78b2d7b77
Merge branch 'pr-8946' into develop 2023-03-10 11:19:42 +01:00
Sami Mokaddem 92c29436d4
Merge branch 'develop' of github.com:MISP/MISP into develop 2023-03-10 11:11:58 +01:00
Sami Mokaddem 78f423451a
fix: [security] XSS in event-graph relationship tooltip 2023-03-10 11:11:13 +01:00
Sami Mokaddem 30255b8d68
fix: [security] XSS in event-graph node tooltips
- as reported by Cyber Controls from SIX Group
2023-03-10 11:10:42 +01:00
Anders Einar Hilden b2ad8fc687 new: [ApacheAuthenticate] Add STARTTLS support for LDAP connection
Controlled by setting `ApacheSecureAuth.starttls`. Default (`ApacheSecureAuth.starttls undefined`) is `false`, since it is a new feature.

config.default.php is updated with `ApacheSecureAuth.starttls = true` as default and extra explanations.
2023-03-10 10:34:26 +01:00
Anders Einar Hilden da5278d349 [new]: [doc] [ApacheSecureAuth] Add minimal docs for ApacheSecureAuth, and a bigger section about using the /users/logout401 endpoint. 2023-03-10 10:34:05 +01:00
Anders Einar Hilden ec495da477 [new]: [ApacheSecureAuth] Add endpoint /users/logout401 for logging out from HTTP Basic Auth
This can be used by i.e. ApacheSecureAuth to make a browser forget cached HTTP Basic Auth credentials, which would otherwise result in a logut->login loop.
2023-03-10 10:34:05 +01:00
Alexandre Dulaunoy 9898c68482
Merge branch 'develop' of github.com:MISP/MISP into develop 2023-03-10 08:46:36 +01:00
Alexandre Dulaunoy 066f49f64e
chg: [misp-galaxy] updated to the latest version 2023-03-10 08:45:52 +01:00
Sami Mokaddem 69e3948dea
fix: [workflowModules:splunkHec] Fixed indentation 2023-03-10 08:44:30 +01:00
Sami Mokaddem 7155b9afe2
Merge branch 'pr-8835' into develop 2023-03-10 08:41:22 +01:00
Sami Mokaddem f96abece4f
Merge branch 'develop' of github.com:MISP/MISP into develop 2023-03-10 08:34:01 +01:00
Sami Mokaddem 55bc56d8d7
chg: [command:ls22] Improved scoring for LS shell 2023-03-10 08:33:27 +01:00
Alexandre Dulaunoy 84d620fd9a
chg: [misp-objects] updated to the latest version 2023-03-09 18:10:04 +01:00
Alexandre Dulaunoy b17ea1c38f
chg: [misp-warning] updated to the latest version 2023-03-09 15:13:13 +01:00
Alexandre Dulaunoy b1562d70e0
chg: [PyMISP] updated 2023-03-08 14:17:14 +01:00
iglocska 5720f25888
fix: [LS22 shell] parameter name fixed 2023-03-08 10:08:00 +01:00
iglocska 2872bc1374
Merge branch '2.4' into develop 2023-03-08 10:05:06 +01:00
iglocska 4ece8c74c9
new: [LS22 shell] added setSetting command 2023-03-08 10:04:29 +01:00
Alexandre Dulaunoy 8c8034543d
chg: [misp-galaxy] updated to the latest version 2023-03-07 12:24:27 +01:00
Benni0 82b01aae15
fix: [workflow:module_splunk_hec_export] typo colon removed 2023-03-02 22:15:44 +01:00
iglocska 9619c0e866
fix: [Sighting] rework of the loading via restsearch
- the chunking and limiting by attribute IDs in the sighting restsearch caused long delays due to a select with two AND-ed in value lists causing the query optimiser to constantly run statistics on the table
- moved the filtering by attribute to PHP side via a loop, it should boost the performance of the function - and with it the sync considerably
2023-03-02 10:30:43 +01:00
Benni0 f99828ba8a
Merge pull request #1 from Benni0/develop
Merge fix for workflow:module_splunk_hec_export
2023-03-02 10:04:36 +01:00
iglocska cdf270606c
fix: [Sighting] rework of the loading via restsearch
- the chunking and limiting by attribute IDs in the sighting restsearch caused long delays due to a select with two AND-ed in value lists causing the query optimiser to constantly run statistics on the table
- moved the filtering by attribute to PHP side via a loop, it should boost the performance of the function - and with it the sync considerably
2023-03-02 09:49:44 +01:00
iglocska 68c6563dc8
fix: [attribute correlations] account for both entry points, event view and attribute index
- to select the correct field for the remote ID (rather than point at an attribute ID in the related events)
2023-02-28 13:56:07 +01:00
iglocska 91d87b4e44
fix: [correlations] attribute index / search shows incorrect correlations, fixes #8930
- showed the attribute ID rather than the event ID, also leading to invalid URLs for pivoting
2023-02-27 14:56:30 +01:00
iglocska d123b27960
fix: [object correlations] fixed - ACL was incorrectly hiding valid correlations for a user, fixes #8929
- inherit as the object distribution was blocked when showing correlations
2023-02-27 14:21:47 +01:00
benni0 8eb26b7a9d chg: [workflow:module_splunk_hec_export] added parameter for source type specification 2023-02-26 12:25:24 +00:00
benni0 6ae140e5a9 fix: [workflow:module_splunk_hec_export] top level event required by splunk hec 2023-02-26 12:23:54 +00:00