MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

Update 2018-10-09-MISP.2.4.96.released.md

pull/6/head
Andras Iklody 2018-10-09 16:52:20 +02:00 committed by GitHub
parent f681b69ba1
commit 4a8027146f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
_posts/2018-10-09-MISP.2.4.96.released.md
View File

@ -4,25 +4,25 @@ layout: post
featured: /assets/images/misp-small.png featured: /assets/images/misp-small.png
--- ---
A new version of MISP ([2.4.96](https://github.com/MISP/MISP/tree/v2.4.96)) has been released with complete rework, refactoring and simplification of the API restSearch, allowing for more flexibility, improved search capabilities, performance and extendability. A new version of MISP ([2.4.96](https://github.com/MISP/MISP/tree/v2.4.96)) has been released with a complete rework, refactoring and simplification of the restSearch API, allowing for more flexibility, improved search capabilities, performance and extendability.
The restSearch interface is now tight to the new export system. Any export format within MISP can now use the standard restSearch API and having the same query format. The complete documentation of the restSearch is included in the automation page. All of the MISP export APIs have now been unified into the restSearch APIs with a vastly improved query format. The complete documentation of the restSearch is included in the automation page.
A new limit and pagination system has been added allowing to easily paginate over a search result set and limit output. The two new parameters are limit and page and directly accessible in the MISP query format. A pagination system has been added allowing users to easily paginate over search result sets and limit the output. The two new parameters are limit and page, both directly accessible in the MISP query format.
The search result in the MISP user interface now allows to download the search format in all the formats available in MISP. The search results in the MISP UI now allows for the direct download of the search results in any of the supported formats available in MISP in a convenient and quick way.
The CSV export has been rewritten to allow more flexibility such as limiting the fields to include or adding additional context. Previous bug in CSV were also fixed in the mean time. The CSV export has been refined to remove inconsistencies in the requested field parameters and the header field names among other fixes.
The fetcher was improved and especially in the handling of MISP objects to allow a significant performance. The internal fetcher has been rewritten to use an internal pagination and caching mechanism that scales with the amount of memory given to the PHP process, increasing performance and reducing the chance of ever running into memory limit issues. Various other changes (such as resolving some bottlenecks in regards to object references, potential query length issues in certain situations, etc) improve both the stability and performance of all functions relying on fetching event / attribute data.
Freetext import is now delegated to a background process for large import. Freetext import was improved for ASN detection and additional refanging of indicators. The freetext import is now delegated to a background process for large imports. It has also received additional tweaks such as support for ASN detection and additional indicaor refanging rules.
API for warning-lists has been improved and can now be updated by using a substring of the warning-lists. A simple toggle function mechanism to disable and enable warning-lists. The API for warning-lists has been improved and can now be updated by using a substring contained within a warninglist's name. A simple toggle function mechanism to disable and enable warning-lists via the API has also been added.
The [cortex integration is now back](https://blog.thehive-project.org/2018/09/27/cortex-2-1-0-the-response-edition/) to nominal and fully functional with this latest version. The [cortex integration is now back](https://blog.thehive-project.org/2018/09/27/cortex-2-1-0-the-response-edition/) to nominal and fully functional with this latest version.
Major improvements and bugs fixed were introduced including user-interface, API, STIX 1/2 import and export. A host of addiitional improvements and bugs fixed were introduced including improvements to the user-interface, API, STIX 1/2 import and export, etc.
A huge thanks to all the [contributors](/contributors) who have tirelessly helped us improve the software and also all the participants in the MISP trainings giving us a bunch of interesting feedback for ideas for improvements. A huge thanks to all the [contributors](/contributors) who have tirelessly helped us improve the software and also all the participants in the MISP trainings giving us a bunch of interesting feedback for ideas for improvements.