chg: [changelog] updated

pull/96/head
Alexandre Dulaunoy 2024-01-05 00:35:54 +01:00
parent 99e0b2244b
commit 2cd421b8ea
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
9 changed files with 2780 additions and 0 deletions

File diff suppressed because it is too large Load Diff

View File

@ -2,6 +2,29 @@ Changelog
=========
v2.4.183 (2024-01-04)
---------------------
New
~~~
- Documentation to install PyMISP on offline machine. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump objects. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Remove jsonschema from dependencies. [Raphaël Vinot]
- Encrypt malicious js. [Raphaël Vinot]
Other
~~~~~
- Fix api ssl verify typing. [Steven]
- Add HTTPS Adapter. [Steven]
Add the ability to provide a custom HTTPS adapter to the PyMISP class. With M2Crypto and m2requests, this can enable mutual TLS with hardware tokens.
v2.4.182 (2023-12-14)
---------------------

View File

@ -1,6 +1,127 @@
# Changelog
## v2.4.183 (2024-01-04)
### New
* [misp-galaxy.org] First version of misp-galaxy.org. [Alexandre Dulaunoy]
* [mkdocs] basic generator for the mkdocs-material website for all the MISP galaxy. [Alexandre Dulaunoy]
Work-in-progress
* [disarm] add Actor Types. [Christophe Vandeplas]
* [disarm] add Detections. [Christophe Vandeplas]
* [disarm] add Countermeasures. [Christophe Vandeplas]
* [mitre] New MITRE ATLAS Galaxy. [Christophe Vandeplas]
### Changes
* [sigma] updated to the latest version. [Alexandre Dulaunoy]
* [mkdocs] add a visual. [Alexandre Dulaunoy]
* [mkdocs] add the authors box per cluster. [Alexandre Dulaunoy]
* [mkdocs] add the contributing part. [Alexandre Dulaunoy]
* [mkdocs] add RSS support. [Alexandre Dulaunoy]
* [mkdocs] fix the title page generation. [Alexandre Dulaunoy]
* [sigma] updated to the latest version. [Alexandre Dulaunoy]
* [disarm] relations. [Christophe Vandeplas]
* [doc] index updated. [Alexandre Dulaunoy]
### Fix
* [mitre-atlas] tactics links fixed. [Alexandre Dulaunoy]
* [mitre-atlas] reference to Markdown link updated. [Alexandre Dulaunoy]
* [disarm] drop duplicate values. [Christophe Vandeplas]
* [tests] missing sudo. [Christophe Vandeplas]
* [tests] Use local Galaxies and not the misp-galaxies main branch. [Christophe Vandeplas]
* [disarm] remove galaxy/cluster due to duplicates. [Christophe Vandeplas]
see https://github.com/DISARMFoundation/DISARMframeworks/issues/24 and the feature/disarm branch here
* [disarm] fix UUID. [Christophe Vandeplas]
* [disarm] fix UUIDs. [Christophe Vandeplas]
to be generated based on a disarm specific UUID
* [mitre-atlas] better sorting of data. [Christophe Vandeplas]
* [disarm] value without ID. [Christophe Vandeplas]
* [mitre-atlas] value without ID. [Christophe Vandeplas]
* [mitre] Correct order of Kill-Chain of ATLAS. [Christophe Vandeplas]
* [threat-actor] fix JSON. [Alexandre Dulaunoy]
### Other
* Merge pull request #911 from MISP/fix/duplicates. [Christophe Vandeplas]
fix: [disarm] drop duplicate values
* Merge pull request #910 from MISP/feature/disarm. [Alexandre Dulaunoy]
Feature/disarm
* Merge remote-tracking branch 'MISP/main' into feature/disarm. [Christophe Vandeplas]
* Merge pull request #909 from Mathieu4141/threat-actors/7f195239-b9da-45a5-b1f7-daa87deaf347. [Alexandre Dulaunoy]
[threat-actors] Add 5 new actors + some aliases on 2 existing ones
* [threat-actors] Add GambleForce. [Mathieu4141]
* [threat-actors] Add Tortoiseshell aliases. [Mathieu4141]
* [threat-actors] Add Taidoor aliases. [Mathieu4141]
* [threat-actors] Add UNC4736. [Mathieu4141]
* [threat-actors] Add Solntsepek. [Mathieu4141]
* [threat-actors] Add Storm-1283. [Mathieu4141]
* [threat-actors] Add BiBiGun. [Mathieu4141]
* Merge pull request #908 from MISP/feature/atlas. [Alexandre Dulaunoy]
new: [mitre] New MITRE ATLAS Galaxy
* Merge branch 'jstnk9-main' into main. [Alexandre Dulaunoy]
* New threat actor - Sandman APT. [jstnk9]
new threat actor - Sandman APT
* Merge pull request #906 from Mathieu4141/threat-actors/253231ea-d8c6-47f5-a1c6-a5e1500a9c3a. [Alexandre Dulaunoy]
[threat actors] Add some aliases
* [threat-actors] Add Callisto aliases. [Mathieu Beligon]
* [threat-actors] Add Hagga aliases. [Mathieu Beligon]
* [threat-actors] Add Sandworm aliases. [Mathieu Beligon]
## v2.4.182 (2023-12-14)
### New

View File

@ -1,6 +1,47 @@
# Changelog
## %%version%% (unreleased)
### Changes
* [misp-objects] updated. [Alexandre Dulaunoy]
### Other
* Merge pull request #647 from ByronLabs/main. [Alexandre Dulaunoy]
Links fixed for Vysion
* Links fix into /docs/index.md and README.md. [Germán Esteban López]
* Merge pull request #646 from ByronLabs/main. [Alexandre Dulaunoy]
Add Vysion expansion module
* Fix vysion.py return error. [Germán Esteban López]
* Update REQUIREMENTS. [Germán Esteban]
* Merge pull request #1 from ByronLabs/pr/vysion. [Germán Esteban]
Pr/vysion
* Merge branch 'main' into pr/vysion. [Germán Esteban]
* Update REQUIREMENTS. [Germán Esteban]
* Added 1.0.9. [Germán Esteban López]
* Added vysion.py. [Germán Esteban López]
* Added vysion.py. [Germán Esteban López]
* Merge branch 'MISP:main' into main. [Germán Esteban]
* Added vysion expansion and documentation. [Germán Esteban López]
## v2.4.182 (2023-12-14)
### Changes

View File

@ -1,6 +1,25 @@
# Changelog
## v2.4.183 (2023-12-31)
### New
* [object] flowintel-cm. [David Cruciani]
### Changes
* [doc] updated. [Alexandre Dulaunoy]
* [flowintel] typo + uuid+origin-url. [David Cruciani]
### Other
* Merge pull request #411 from DavidCruciani/main. [Alexandre Dulaunoy]
new: [object] flowintel-cm
## v2.4.182 (2023-12-14)
### Changes

View File

@ -1,6 +1,153 @@
# Changelog
## v2.4.183 (2024-01-04)
### Changes
* [poetry] Bumped latest deps versions and lock file. [Christian Studer]
* [stix2 import] Handling external ids and synonyms from STIX 2.x objects imported as MISP Galaxy Clusters. [Christian Studer]
* [poetry] Updated pyproject & bumped lock file. [Christian Studer]
* [poetry] Bumped latest dependencies and versions. [Christian Studer]
* [tests] Updated STIX 2.x internal samples to match the recent changes on STIX 2.x export capacity. [Christian Studer]
### Fix
* [stix2 import] Separating the synonyms and external ids handling. [Christian Studer]
- Different handling for internal and external STIX content
* [stix2 import] Added missing imports for Observed Data Converters. [Christian Studer]
* [tests] Fixed tests for galaxy and their clusters following recent changes on the synonyms and external ids handling. [Christian Studer]
* [requirements] Updated the requirements list with no specific version. [Christian Studer]
- Allowing users to quickly install the requirements with the latest
versions outside of the poetry scope
- Removing the specific versions avoids issues with old versions
* [tests] Aligning test sample on tags with the tag name of the recently changed attack pattern cluster sample to keep testing the non duplication of the tag name with tags. [Christian Studer]
* [tests] Making the automated documentation generation specific to the related test Classes instead of making it run for each testing class tear down. [Christian Studer]
* [documentation] Fixed and regenerated documentation for Galaxy Clusters export to STIX 2.x. [Christian Studer]
* [documentation] Fixed and regenerated galaxies export documentation. [Christian Studer]
* [documentation] Regenerated documentation. [Christian Studer]
* [documentation] Changes in galaxies documentation, based on the cluster name changes. [Christian Studer]
* [tests] Fixed tests on cluster values. [Christian Studer]
* [stix2 export] Removing external id from all Galaxy Cluster value. [Christian Studer]
* [tests] Fixed tests to avoid issues with aliases. [Christian Studer]
* [stix2 export] Fixed meta fields parsing for STIX objects having meta fields mapping. [Christian Studer]
* [stix2 export] Fixed the external references parsing from Clusters meta fields. [Christian Studer]
* [tests] Aligning test sample on tags with the tag name of the recently changed attack pattern cluster sample to keep testing the non duplication of the tag name with tags. [Christian Studer]
* [tests] Making the automated documentation generation specific to the related test Classes instead of making it run for each testing class tear down. [Christian Studer]
* [documentation] Fixed and regenerated documentation for Galaxy Clusters export to STIX 2.x. [Christian Studer]
* [documentation] Fixed and regenerated galaxies export documentation. [Christian Studer]
* [documentation] Regenerated documentation. [Christian Studer]
* [documentation] Changes in galaxies documentation, based on the cluster name changes. [Christian Studer]
* [tests] Fixed tests on cluster values. [Christian Studer]
* [stix2 export] Removing external id from all Galaxy Cluster value. [Christian Studer]
* [tests] Quick code style clean-up. [Christian Studer]
* [stix2 import] Quick clean-up. [Christian Studer]
* [stix2 import] Added missing cluster distribution argument. [Christian Studer]
* [stix2 import] Fixed issues with protocols and references from network traffic observable objects. [Christian Studer]
* [stix2 import] Cleaned up the unused parsing methods for internal STIX 2.x content, as they've been moved to the converters. [Christian Studer]
* [stix2 import] Avoiding issues with custom labels. [Christian Studer]
* [stix2 import] Some clean-up and better 'observable object id VS observed data id' handling. [Christian Studer]
* [stix2 import] Making the user account extension mapping name compliant with the generic observable objects parsing method. [Christian Studer]
* [tests] Fixed tests following recent changes including the observed data objects conversion, as well as some better UUID handling. [Christian Studer]
* [stix2 import] Fixed generic & user-account observables conversion. [Christian Studer]
* [stix2 import] Fixed `domain-ip` objects import from internal STIX 2.x. [Christian Studer]
* [stix2 import] Fixing a few tiny issues. [Christian Studer]
- Fixes on the Observable objects converter will
be committed soon as well
* [stix2 import] Fixed a few typo in variable names and indentation issues. [Christian Studer]
* [stix2 import] Added missing argument for email references observables parsing. [Christian Studer]
* [stix2 import] Fixed Network Traffic references id handling. [Christian Studer]
### Other
* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer]
* Fix, tmp: [stix2 import] Removing unused Observed Data Converter for now. [Christian Studer]
* Merge branch 'parser_feature' of github.com:MISP/misp-stix into dev. [Christian Studer]
* Fix, tmp: [stix2 import] Restored parsing functions that were removed too early before the converters are fully operational. [Christian Studer]
* Merge branch 'parser_feature' of github.com:MISP/misp-stix into dev. [Christian Studer]
* Merge branch 'parser_feature' of github.com:MISP/misp-stix into dev. [Christian Studer]
* Merge branch 'main' of github.com:misp/misp-stix into parser_feature. [Christian Studer]
* Wip: [stix2 export] Better handling meta fields, and the synonyms in particular. [Christian Studer]
* Add: [stix2 import] Handling clusters sharing group id for content converter from external STIX 2.x. [Christian Studer]
* Add: [stix2 import] Added cluster distribution argument to the external STIX 2 to MISP parser. [Christian Studer]
- We can now define a distribution value for
clusters, the same we have been already able to
do for events distribution
* Wip: [stix2 import] Supporting TLP 2.0 Marking definition. [Christian Studer]
* Add: [tests] Tests for internal STIX 2.x content with custom labels. [Christian Studer]
* Merge branch 'parser_feature' of github.com:MISP/misp-stix into dev. [Christian Studer]
* Wip: [stix2 import] Updated the observable objects conversion capacity to support the reusability between standalone observable objects and observable objects referenced by observed data objects. [Christian Studer]
* Wip: [stix2 import] Added Observed Data objects converter. [Christian Studer]
- To be tested and made operational
- Supporting internal STIX 2 content for now
* Wip: [stix2 import] Reusing elements from mapping. [Christian Studer]
* Wip: [stix2 import] Parsing PE binary extensions within File observable objects. [Christian Studer]
* Wip: [stix2 import] Some clean-up. [Christian Studer]
## v2.4.182 (2023-12-14)
### Changes

View File

@ -1,6 +1,25 @@
# Changelog
## v2.4.183 (2024-01-04)
### Changes
* [doc] list updated. [Alexandre Dulaunoy]
* [doc] doc and manifest updated. [Alexandre Dulaunoy]
### Fix
* [doping-substances] Deduplicated some entries. [Christian Studer]
### Other
* Merge pull request #270 from chrisr3d/main. [Christian Studer]
Deduplicated some entries
## v2.4.179 (2023-11-23)
### New

View File

@ -1,6 +1,19 @@
# Changelog
## v2.4.183 (2024-01-04)
### Changes
* [lists] updated to the latest version. [Alexandre Dulaunoy]
* [doc] list updated. [Alexandre Dulaunoy]
* [findip-host] more hosts collected from Passive DNS. [Alexandre Dulaunoy]
* [warning-lists] updated. [Alexandre Dulaunoy]
## v2.4.182 (2023-12-14)
### Changes

View File

@ -2,6 +2,179 @@ Changelog
=========
%%version%% (unreleased)
------------------------
Changes
~~~~~~~
- [misp-stix] Bumped latest version. [Christian Studer]
Other
~~~~~
- Merge branch 'develop' of github.com:MISP/MISP into 2.4. [Christian
Studer]
- Merge branch '2.4' of github.com:MISP/MISP into develop. [Christian
Studer]
- Merge branch 'develop' of github.com:MISP/MISP into develop.
[Christian Studer]
v2.4.183 (2024-01-04)
---------------------
New
~~~
- [internal] New option `Security.ecs_log` to enable ECS logging. [Jakub
Onderka]
- [internal] Add more metadata to ECS log. [Jakub Onderka]
- [internal] Add more metadata to ECS log. [Jakub Onderka]
- [internal] Add support for MISP ECS logs. [Jakub Onderka]
- [internal] Add support for ECS logs for debug and error log. [Jakub
Onderka]
- [garbage collection] added for temporary files. [iglocska]
- [sg blueprint] encode as sync rule functionality added. [iglocska]
Changes
~~~~~~~
- [VERSION] bump. [iglocska]
- [internal] Refactor UserController::_postlogin. [Jakub Onderka]
- [internal] Add 'Security.alert_on_suspicious_logins' to security
audit. [Jakub Onderka]
- [internal] Do not log in audit log last_api_access. [Jakub Onderka]
- [scan] Skip empty files. [Jakub Onderka]
- [log] Proper exception logging. [Jakub Onderka]
- [sentry] Capture exception with message. [Jakub Onderka]
- [misp-objects] updated to the latest version. [Alexandre Dulaunoy]
- [warning-lists] updated to the latest version. [Alexandre Dulaunoy]
- [taxonomies] updated to the latest version. [Alexandre Dulaunoy]
- [misp-galaxy] updated to the latest version. [Alexandre Dulaunoy]
- [misp-stix] Bumped latest version. [Christian Studer]
- Including changes on the requirements
- [PyMISP] Bump version. [Raphaël Vinot]
- [internal] Better logging for Oidc. [Jakub Onderka]
- [internal] ECS: Log if there is problem with converting log to JSON.
[Jakub Onderka]
- [internal] Handle GeoIp2 exceptions. [Jakub Onderka]
- [internal] Add logging for UserShell::authkey_valid. [Jakub Onderka]
- [internal] Move field description to controller. [Jakub Onderka]
- [UI] Show choosen when importing STIX. [Jakub Onderka]
- [internal] Error handling when converting MISP2STIX. [Jakub Onderka]
- [internal] Error handling when converting STIX2MISP. [Jakub Onderka]
- [internal] Code cleanup for UserLoginProfile. [Jakub Onderka]
- [warning-lists] updated to the latest version. [Alexandre Dulaunoy]
- [install] support jammy - see #9153. [Christophe Vandeplas]
- [install] support jammy - see #9153. [Christophe Vandeplas]
- [internal] ECS: Add specific log for emails. [Jakub Onderka]
- [internal] ECS: Do not cache IP address. [Jakub Onderka]
- [internal] Code cleanup for logging. [Jakub Onderka]
- [internal] Code cleanup for user login profile. [Jakub Onderka]
- [addTag] functions changed to also work with uuids, rather than just
local IDs. [iglocska]
- as reported by @0x3c7
- [event:view] Added option to mass local cluster tag. [Sami Mokaddem]
- [tools] mention the communities json page. [Christophe Vandeplas]
- [communities] added SecureGRID community. [Christophe Vandeplas]
Fix
~~~
- [cleanup] removed copy pasta junk. [iglocska]
- [internal] Fix view user login history. [Jakub Onderka]
- [internal] Code style. [Jakub Onderka]
- [internal] Review user logins fix. [Jakub Onderka]
- [internal] ECS session start. [Jakub Onderka]
- [internal] Session destroy. [Jakub Onderka]
- Missing deps for tests. [Raphaël Vinot]
- Searching events by event_tags. [Stefano Ortolani]
- [internal] Correctly handle X-Forwarded-For header values. [Jakub
Onderka]
- [internal] Undefined index sharing_group_id when uploading stix file.
[Jakub Onderka]
- [internal] OIDC log. [Jakub Onderka]
- [internal] ECS: Log errors when executing external processes. [Jakub
Onderka]
- [internal] ECS: Add support for handling PHP errors and exceptions.
[Jakub Onderka]
- [internal] ECS: Reliable logging. [Jakub Onderka]
- [internal] ECS: Avoid double JSON encoding. [Jakub Onderka]
- [internal] ECS: URL query field. [Jakub Onderka]
- [internal] Code cleanup for IP logging. [Jakub Onderka]
- [internal] ECS: Timestamp with microseconds. [Jakub Onderka]
- [internal] ECS: Invalid port checking in metadata. [Jakub Onderka]
- [feeds] broken JSON fixed for the meta feeds. [Alexandre Dulaunoy]
- [install] fix install script invalid checksum. [Christophe Vandeplas]
- [install] fix install script invalid checksum. [Christophe Vandeplas]
- [datasource] added to valid datasources list. [iglocska]
- [datasource] added mashup of mysqlobserver and mysqlextended.
[iglocska]
- [events:view] Typo in attributeToolbar for mass cluster tag. [Sami
Mokaddem]
- Openapi spec version not supported by redoc. [Luciano Righetti]
- Openapi spec version not supported by redoc. [Luciano Righetti]
- [servers] custom cert file not written when cert folder does not
exist. [Christophe Vandeplas]
- [workflow-modules:Organisation_if] Make sure to convert operator to
support new version of the module. [Sami Mokaddem]
Shoud fix #9423
- [communities] fixed SecureGRID community link. [Christophe Vandeplas]
Other
~~~~~
- Merge branch 'develop' into 2.4. [iglocska]
- Merge pull request #9473 from JakubOnderka/logging. [Jakub Onderka]
chg: [internal] Do not log in audit log last_api_access
- Merge pull request #9476 from JakubOnderka/session-destroy. [Jakub
Onderka]
fix: [internal] Session destroy
- Merge pull request #9106 from JakubOnderka/sentry-nicer. [Jakub
Onderka]
chg: [sentry] Capture exception with message
- Merge branch '2.4' of github.com:MISP/MISP into develop. [Christian
Studer]
- Merge pull request #9474 from ostefano/dev. [Andras Iklody]
fix: searching events by event_tags
- Merge branch 'develop' of github.com:MISP/MISP into develop.
[Christian Studer]
- Merge pull request #9472 from JakubOnderka/logging. [Jakub Onderka]
fix: [internal] Correctly handle X-Forwarded-For header values
- Merge pull request #9471 from JakubOnderka/logging. [Jakub Onderka]
fix: [internal] OIDC log
- Merge pull request #9470 from JakubOnderka/logging. [Jakub Onderka]
fix: [internal] ECS: Reliable logging
- Merge pull request #9466 from JakubOnderka/logging. [Jakub Onderka]
fix: [internal] ECS: Invalid port checking in metadata
- Merge branch '2.4' into develop. [Alexandre Dulaunoy]
- Merge pull request #9465 from JakubOnderka/logging. [Jakub Onderka]
ECS logging
- Merge branch '2.4' into develop. [iglocska]
- Merge pull request #9153 from nyx0/2.4. [Andras Iklody]
upd: add jammy release for arm64.
- Upd: add jammy release for arm64. [Thomas Dupuy]
- Merge pull request #9457 from threatintelBB/2.4. [Andras Iklody]
Banco do Brasil public feed
- Banco do Brasil public feed. [kali]
- Banco do Brasil public feed. [kali]
- Merge branch '2.4' into develop. [iglocska]
- Merge branch '2.4' into develop. [iglocska]
- Merge branch '2.4' into develop. [iglocska]
- Merge branch 'develop' of github.com:MISP/MISP into develop. [Sami
Mokaddem]
- Merge branch '2.4' into develop. [iglocska]
v2.4.182 (2023-12-14)
---------------------