diff --git a/static/Changelog-PyMISP.txt b/static/Changelog-PyMISP.txt index a41349a..869e8dd 100644 --- a/static/Changelog-PyMISP.txt +++ b/static/Changelog-PyMISP.txt @@ -2,6 +2,24 @@ Changelog ========= +v2.4.174 (2023-07-31) +--------------------- + +Changes +~~~~~~~ +- Bump changelog. [Raphaël Vinot] +- Bump version, templates. [Raphaël Vinot] +- Bump deps, fix code accordingly. [Raphaël Vinot] + +Fix +~~~ +- Push code changes related to deps upgrade... [Raphaël Vinot] + +Other +~~~~~ +- Git: Bump deps. [Raphaël Vinot] + + v2.4.173 (2023-07-10) --------------------- diff --git a/static/Changelog-misp-galaxy.txt b/static/Changelog-misp-galaxy.txt index de1295a..b986766 100644 --- a/static/Changelog-misp-galaxy.txt +++ b/static/Changelog-misp-galaxy.txt @@ -1,10 +1,32 @@ # Changelog -## %%version%% (unreleased) +## v2.4.174 (2023-07-31) + +### Changes + +* [sigma] updated to the latest version. [Alexandre Dulaunoy] + +* [sigma] updated to the latest version. [Alexandre Dulaunoy] + +* [threat-actor] added references, origin country, aliases to `Sea Turtle` [Rony] + +* [sigma] updated to the latest rules. [Alexandre Dulaunoy] ### Other +* Merge pull request #855 from r0ny123/Sea-Turtle. [Alexandre Dulaunoy] + + Update to `Sea Turtle` + +* Merge branch 'MISP:main' into Sea-Turtle. [Rony] + +* Merge pull request #854 from nyx0/main. [Alexandre Dulaunoy] + + upd: Add Worok TA and update APT-Q-12 to APT-C-60 as it was the first + +* Upd: Add Worok TA and update APT-Q-12 to APT-C-60 as it was the first name mention in an article. [Thomas Dupuy] + * Merge pull request #853 from Delta-Sierra/main. [Alexandre Dulaunoy] add SmugX & RedDelta diff --git a/static/Changelog-misp-modules.txt b/static/Changelog-misp-modules.txt index 41cb2e1..be6f9b8 100644 --- a/static/Changelog-misp-modules.txt +++ b/static/Changelog-misp-modules.txt @@ -1,10 +1,28 @@ # Changelog -## %%version%% (unreleased) +## v2.4.174 (2023-07-31) + +### Changes + +* [expansion:extract_url_components] Better support in case attributes are not defined. [Sami Mokaddem] + +* [action:mattermost] Improved support of hostname/url. [Sami Mokaddem] + +### Fix + +* [google_safe_browsing] Added pysafebrowsing in REQUIREMENTS. [Sami Mokaddem] ### Other +* Merge branch 'main' of github.com:MISP/misp-modules into main. [Sami Mokaddem] + +* Merge pull request #629 from TinyHouseHippos/abuseipdb_googlesafebrowsing. [Sami Mokaddem] + + Added the new attribute and tags for AbuseIPDB and added the google s… + +* Added the new attribute and tags for AbuseIPDB and added the google safe browsing expansion module. [Steph S] + * Merge pull request #627 from hyasinfosec/main. [Alexandre Dulaunoy] Added User Agent diff --git a/static/Changelog-misp-objects.txt b/static/Changelog-misp-objects.txt index 8bc1c52..e0401d4 100644 --- a/static/Changelog-misp-objects.txt +++ b/static/Changelog-misp-objects.txt @@ -1,7 +1,7 @@ # Changelog -## %%version%% (unreleased) +## v2.4.174 (2023-07-31) ### New @@ -9,10 +9,70 @@ ### Changes +* [malware-config] to add attachment and description of the malware config. [Alexandre Dulaunoy] + +* [scan-results] jq all the things. [Alexandre Dulaunoy] + +* [ja3s] Add domain and hostname attributes. [417190e5c48babc7] + +* [relationships] Added some relationships defined in STIX 2.1 & updated some opposite relationships in consequence. [Christian Studer] + * [hhhash] newline fixed. [Alexandre Dulaunoy] +### Fix + +* [malware-config] typo fixed. [Alexandre Dulaunoy] + +* [impacts] Typo. [Christian Studer] + +* [confidentiality-impact] JQed. [Christian Studer] + ### Other +* Merge pull request #401 from mFaou/main. [Alexandre Dulaunoy] + + Fix for https://github.com/MISP/misp-objects/issues/390 + +* Removed line break. [Matthieu Faou] + +* Added internet scanning tools to scan-result. [Matthieu Faou] + +* Merge pull request #400 from 417190e5c48babc7/ja3s-hostname-and-domain-attributes. [Alexandre Dulaunoy] + + chg: [ja3s] Add domain and hostname attributes + +* Merge pull request #396 from MISP/chrisr3d_patch. [Alexandre Dulaunoy] + + New object templates to support new STIX 2.1 Incident extension objects + +* Add: [incident] Added the score attribute. [Christian Studer] + + - We will probably parse scores and build the + attribute value the following way: + "{name} - {description}: {score}" + +* Merge branch 'main' of github.com:MISP/misp-objects into chrisr3d_patch. [Christian Studer] + +* Wip: [task] New object template for tasks as described in STIX 2.1 Incident object extensions. [Christian Studer] + +* Wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions. [Christian Studer] + +* Wip: [event] New object template to describe events that can happen during an incident. [Christian Studer] + +* Add: [incident] Added the required object relation. [Christian Studer] + +* Add: [incident] Incident object based on the STIX 2.1 Incident object as well as its core extension. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-objects into chrisr3d_patch. [Christian Studer] + +* Merge pull request #399 from TinyHouseHippos/abuseipdb_googlesafebrowsing. [Sami Mokaddem] + + Added a is-malicious attribute for abuseipdb and added a google-safe-… + +* Fixed json formatting. [Steph S] + +* Added a is-malicious attribute for abuseipdb and added a google-safe-browsing object for the google-safe-browsing expansion module. [Steph S] + * Merge pull request #397 from GeekWeekSteph/abuseipdb. [Alexandre Dulaunoy] Added AbuseIPDB object template for the AbuseIPDB expansion module diff --git a/static/Changelog-misp-stix.txt b/static/Changelog-misp-stix.txt index 5d2b3c6..62216bc 100644 --- a/static/Changelog-misp-stix.txt +++ b/static/Changelog-misp-stix.txt @@ -1,6 +1,131 @@ # Changelog +## v2.4.174 (2023-07-31) + +### Changes + +* [poetry] Bumped lock file. [Christian Studer] + +* [stix import] Simplified data path. [Christian Studer] + +* [tests] Updated tests for sightings import. [Christian Studer] + + - Also changed some sample to have different order + with Identity objects in order to test properly + our recent changes on loading and converting the + sightings, which purpose was to avoid issues + with the STIX objects order + +* [stix2 import] Updated the External STIX 2 Identity objects mapping to MISP `organization` objects following recent updates on that template. [Christian Studer] + +* [readme] Updated MISP collections to STIX 1 export example. [Christian Studer] + +* [readme] Updated usage documentation following recent changes on the command-line feature and some helper methods. [Christian Studer] + +* [poetry] Bumped latest dependencies. [Christian Studer] + +### Fix + +* [stix2 import] Differenciating between internal and external stix content regarding the external references handling. [Christian Studer] + +* [tests] Fixed tests for vulnerability cluster import following recent changes on the meta fields. [Christian Studer] + +* [stix2 import] Fixed vulnerability cluster meta fields parsing. [Christian Studer] + +* [tests] Fixed the vulnerability clusters meta tests according to the latest changes on the external id (cve) field parsing. [Christian Studer] + +* [stix2 export] Fixed vulnerability clusters meta fields parsing. [Christian Studer] + +* [stix2 export] Fixed `malware_types` fields & added missing method for `threat_actor_types` parsing. [Christian Studer] + +* [stix2 import] Added missing `annotation` object metadata parsing. [Christian Studer] + +* [tests] Removed some results writing in files which were used at some point for debugging purposes and forgotten in the code vastness. [Christian Studer] + +* [stix2 import] Shorter obervable types extraction while still including the recent fix to avoid issues with observables that are of `dict` type. [Christian Studer] + +* [stix1 export] Fixed backward compatibility with old object templates. [Christian Studer] + +* [stix2 export] Fixed backward compatibility with old object templates. [Christian Studer] + +* [stix import] Sanitised the import variables declaration to avoid issue with wrong value format. [Christian Studer] + +* [command-line] Fixed results message. [Christian Studer] + +* Observable type access for dict type. [Sura De Silva] + +* [stix2 import] Typo within the Opinion objects loading method. [Christian Studer] + +* [stix2 import] Better handling of MISP Sightings import. [Christian Studer] + + - Storing `Sighting` & `Opinion` objects instead + of converting them to MISP Sightings while + loading them, because in some cases we need the + information of the related org, which is not + always already loaded when the need its info + - We convert the STIX objects to Sightings at the + end while we loop over the different references + +* [stix2 import] Better `Identity` object's identity class field handling. [Christian Studer] + +* [stix2 import] Using the Galaxy Cluster adding method to add cluster instead of appending it the the list of clusters. [Christian Studer] + +### Other + +* Merge branch 'main' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'dev' of github.com:misp/misp-stix. [Christian Studer] + +* Merge pull request #45 from SYNchroACK/fix/wrong-import. [Christian Studer] + + Fix wrong stix observables import + +* Fix wrong stix observables import. [Tomas Lima] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix into dev. [Christian Studer] + +* Wip: [stix2 import] Updated the import conversion of internal STIX 2.x Identity objects to better support recent changes on the `organization` template. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge pull request #46 from dragsu/fix-observable-access-dict-type. [Christian Studer] + + fix: `type` access for dict type Observables + +* Merge branch 'main' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Add: [stix2 import] Importing Identity objects with `identity_class` set to organization as `organization` object. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix into dev. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix into dev. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + +* Add: [stix2 import] Adding relations between galaxy clusters. [Christian Studer] + +* Merge branch 'main' of github.com:MISP/misp-stix into dev. [Christian Studer] + +* Merge branch 'dev' of github.com:MISP/misp-stix. [Christian Studer] + + ## v2.4.172 (2023-06-09) ### Changes diff --git a/static/Changelog-misp-taxonomies.txt b/static/Changelog-misp-taxonomies.txt index 2f188f8..c578c17 100644 --- a/static/Changelog-misp-taxonomies.txt +++ b/static/Changelog-misp-taxonomies.txt @@ -1,7 +1,15 @@ # Changelog -## %%version%% (unreleased) +## v2.4.174 (2023-07-31) + +### Changes + +* [misp-workflow] Added more entries related to curation. [Sami Mokaddem] + +### Fix + +* [misp-workflow] Bumped version. [Sami Mokaddem] ### Other diff --git a/static/Changelog-misp-warninglists.txt b/static/Changelog-misp-warninglists.txt index 54fef07..05ee7b1 100644 --- a/static/Changelog-misp-warninglists.txt +++ b/static/Changelog-misp-warninglists.txt @@ -1,6 +1,20 @@ # Changelog +## v2.4.174 (2023-07-31) + +### Changes + +* [lists] warning-lists updated. [Alexandre Dulaunoy] + +* [tools] CRL tool updated to support latest version of dnspython. [Alexandre Dulaunoy] + + Add exception handling for some CRL (in China) returning incorrect DNS + response from their authoritative servers. + +* [lists] updated to the latest version. [Alexandre Dulaunoy] + + ## v2.4.173 (2023-07-04) ### Changes diff --git a/static/Changelog.txt b/static/Changelog.txt index f768c98..ff43ef8 100755 --- a/static/Changelog.txt +++ b/static/Changelog.txt @@ -2,6 +2,241 @@ Changelog ========= +v2.4.174 (2023-07-31) +--------------------- + +New +~~~ +- [Authkeys] Add setting to mandate IP allowlist for advanced authkeys. + [Jeroen Pinoy] +- [workflow:editor] Added support of frame nodes in editor and drawflow + lib. [Sami Mokaddem] +- [workflow:editor] Added min/max-imize support for module sidebar. + [Sami Mokaddem] +- [workflow:editor] Added hash-path picker helper functionality. [Sami + Mokaddem] +- [workflow:editor] Added support of quick insert on link. [Sami + Mokaddem] +- [workflow-module] Added debug function to send custom request to debug + endpoint. [Sami Mokaddem] +- [workflow-modules:tag_replacement] Added tag generic module and + support for TLP and PAP. [Sami Mokaddem] +- [workflow-modules:assign_country_from_enrichment] Added module that + tags using the country galaxy based on the provided hash path. [Sami + Mokaddem] +- [workflow-modules:attribute_comment_operation] Added new module to set + the comment of an Attribute. [Sami Mokaddem] + +Changes +~~~~~~~ +- [version] bump. [iglocska] +- [misp-stix] Bumped latest version. [Christian Studer] +- [PyMISP] Bump. [Raphaël Vinot] +- [misp-galaxy] version 2.4.174. [Alexandre Dulaunoy] +- [taxonomies] updated to the latest version 2.4.174. [Alexandre + Dulaunoy] +- [misp-galaxy] updated to the latest version. [Alexandre Dulaunoy] +- [warninglists] updated to the latest version. [Alexandre Dulaunoy] +- Bumped queryVersion. [Sami Mokaddem] +- [event:publishSightingsRouter] Change from prio worker to default. + [Sami Mokaddem] + + There is no need to keep this task in prio as sightings are not sync inline anymore. +- Do not show last button when using light paginator. [Luciano Righetti] +- [workflow:editor] Make frame node padding configurable. [Sami + Mokaddem] +- [workflow:editor] Small refactoring of drawflow lib. [Sami Mokaddem] +- [workflow:editor] Moved styling in a class rather than in drawflow + lib. [Sami Mokaddem] +- [workflow:editor] Usage of proxy function to delete nodes. [Sami + Mokaddem] +- [workflow:editor] Improved description in hashpath picker for quick + link. [Sami Mokaddem] +- [workflow:editor] Added support of collapse in hashpath picker. [Sami + Mokaddem] +- [workflow-modules] Replace param type for hashpath input to `hashpath` + [Sami Mokaddem] +- [workflow:logging] Changed logging behavior to be less verbose when + debug is not enabled. [Sami Mokaddem] + + - When debug is enabled, it will log eveything as it used to be but also include successfull node execution + - When debug is disabled, it will only log execution errors +- [workflow:editor] Added support of chosen options and disabled inputs. + [Sami Mokaddem] +- [workflow:editor] Add class if node expect MISP core format. [Sami + Mokaddem] +- [workflow-modules:assign_country] Improved behavior when dealing with + scopes. [Sami Mokaddem] +- [workflow-modules:tag_replacement] Improved behavior and added `all` + scope. [Sami Mokaddem] +- [workflow:auditLog] Removed auditlog behavior as it's blocking large + workflows to be saved. [Sami Mokaddem] +- [workflow-modules:assign_country_from_enrichment] Moved from app/Lib + to app/Model. [Sami Mokaddem] +- [workflow-module:generic_filter] Added support of picker_create_new in + value list. [Sami Mokaddem] +- [workflow:matchingItems] Improved any_value and any_value_from for + IF::Generic and Filter::Generic. [Sami Mokaddem] +- [workflow:editor] Added support of list of value for display_on + parameter. [Sami Mokaddem] +- [workflow:editor] Added support of new option `picker_create_new` + [Sami Mokaddem] +- [workflow-modules:generic_filter] Added support of operator + `any_value_in` [Sami Mokaddem] +- [workflow-modules:edition] General improvements, fixed modified data + not being reflected in rData and small refactoring. [Sami Mokaddem] +- [workflow-modules:attach_enrichment] Enable selection of multiple + modules and added support of module not accepting misp_format. [Sami + Mokaddem] + +Fix +~~~ +- [event:publishSightingsRouter] Make sure to use correct queue for + publishSightingsRouter. [Sami Mokaddem] + + Fix bug introduced in 64580168622aeea59997cea5739cf0b8dbcf8bda where workers were set to default but not the queue +- [workflow] Removed trailing comma in function call. [Sami Mokaddem] +- Revert loginAction override. [Luciano Righetti] +- [totp] generate a new totp secret each time a the totp_new endpoint is + queried via a GET request, fixes #9220. [iglocska] +- Light pagination bug in /attributes/search/results see #9157. [Luciano + Righetti] +- [proposal] index should also include the "deleted" field. [iglocska] +- [proposal] proposal index fix as described 2 commits ago. [iglocska] +- [debug reverted] reverted erroneously committed debug / exception. + [iglocska] +- [proposal] sync fixes. [iglocska] + + - include disable correlation / proposal to delete fields in the proposal index + - this is used on pulls, causing these fields to not be included + - especially the proposal to delete field's absence is nasty, as it changes the meaning of the proposal +- [background workers] speculative fix for issues with publishing. + [iglocska] + + - job object not found or not retrieved correctly +- [proposal accept] fixed for deletions. [iglocska] + + - soft delete rather than hard delete or the propagation will fail +- [sightings] only pushed via full push to avoid congestion. [iglocska] + + - the old behaviour can be re-enabled via Sightings.enable_realtime_publish + - massive performance gain on heavily interconnected instances +- [stix export] Avoiding issues in the case of empty input. [Christian + Studer] + + - With no input, the python script called to + convert the MISP input used to barf because + there is no input. + - Should fix MISP/misp-stix#44 +- [taxii_push] Passing standard MISP JSON format to the `taxii_push` + script and by extension to misp-stix. [Christian Studer] +- [taxii_push] The path `resolve` method needs to be called. [Christian + Studer] +- [security] otp reset otp_secret on logout. [iglocska] + + - changing users within the same session can otherwise lead to the creation of the same otp seed for multiple users +- [restsearch] searching for ipv6s fails due to compression not being + applied, fixes #9042. [iglocska] + + - compress ipv6 addresses in value searches to match the behaviour of automatic compression on saving attributes +- [authkeys] allow admin read-only key to access audit logs (#9191) + [Jeroen Pinoy] + + fix #9190 +- [UI] use acl to determine whether to show "audit logs" and "search + logs" buttons (#9192) [Jeroen Pinoy] + + fix #8949 +- [attributes:validation] Allow telfhash to be either 70 or 72 chars + long. [Sami Mokaddem] +- [acl] sighting restsearch should be open to all, fixes #9116. [Andras + Iklody] +- [otp] autofocus added. [iglocska] +- [taxii_push] Passing standard MISP JSON format to the `taxii_push` + script and by extension to misp-stix. [Christian Studer] +- [workflow:editor] Typo in css rule. [Sami Mokaddem] +- [workflow:triggers] Fixed typo in column description. [Sami Mokaddem] +- [workflow:editor] Avoid duplicating labels when path merges on one + node. [Sami Mokaddem] +- [workflow-modules] Prevent exception if no match. [Sami Mokaddem] +- [event:attachTagsdToEventAndTouch] Make sure to continue adding tag in + case of success. [Sami Mokaddem] +- [workflow:editor] Prevent Run workflow popover after closing. [Sami + Mokaddem] +- [workflow-modules:tag_replacement_generic] Provide tag locality for + deletion. [Sami Mokaddem] +- [workflow-modules:attach_enrichment] Make sure to include selected + module config. [Sami Mokaddem] +- [workflow-modules:generic_filter] Set a default filtering label for + new dragged modules. [Sami Mokaddem] + +Other +~~~~~ +- Merge branch 'develop' into 2.4. [iglocska] +- Merge branch 'develop' of github.com:MISP/MISP into develop. + [Christian Studer] +- Merge branch 'develop' of github.com:MISP/MISP into develop. [Sami + Mokaddem] +- Merge branch '2.4' into develop. [Alexandre Dulaunoy] +- Merge pull request #9218 from referefref/2.4. [Alexandre Dulaunoy] + + Added James Brine Bruteforce IPs to feed-metadata defaults json +- Changed feed type to csv and added field identifier value and + delimiter. [ref] +- Added James Brine Bruteforce IPs to feed-metadata defaults json. [ref] + + Added freetext feed endpoint for Bruteforce IPV4 addresses +- Merge branch 'develop' of github.com:MISP/MISP into + feature_workflows/enrichment-improvements. [Sami Mokaddem] +- Merge pull request #9221 from Wachizungu/add-mandate-ip-allowlist-for- + advanced-authkeys-setting. [Alexandre Dulaunoy] + + new: [Authkeys] Add setting to mandate IP allowlist for advanced auth… +- Merge branch 'develop' of github.com:MISP/MISP into + feature_workflows/enrichment-improvements. [Sami Mokaddem] +- Merge pull request #9211 from righel/fix-attr-search-pagination-9157. + [Luciano Righetti] + + fix: light pagination bug in /attributes/search/results see #9157 +- Merge branch 'develop' of github.com:MISP/MISP into develop. + [Christian Studer] +- Merge branch 'loginAction' into develop. [iglocska] +- Explicitly set loginAction with baseurl. [Mathieu Rollet] +- Merge branch 'sighting_push_fix' into develop. [iglocska] +- Merge branch 'misp-stix' of github.com:MISP/MISP into develop. + [Christian Studer] +- Merge branch 'develop' of github.com:MISP/MISP into misp-stix. + [Christian Studer] +- Merge branch 'misp-stix' of github.com:MISP/MISP into misp-stix. + [Christian Studer] +- Merge branch 'develop' into misp-stix. [Christian Studer] +- Merge branch 'develop' of github.com:MISP/MISP into misp-stix. + [Christian Studer] +- Merge branch '2.4' of github.com:MISP/MISP into misp-stix. [Christian + Studer] +- Merge branch 'misp-stix' of github.com:MISP/MISP into misp-stix. + [chrisr3d] +- Merge branch '2.4' of https://github.com/MISP/MISP into misp-stix. + [chrisr3d] +- Merge branch '2.4' of https://github.com/MISP/MISP into misp-stix. + [chrisr3d] +- Merge branch '2.4' of github.com:MISP/MISP into misp-stix. [chrisr3d] +- Merge branch 'develop' of github.com:MISP/MISP into develop. + [Christian Studer] +- Merge branch 'develop' of github.com:MISP/MISP into develop. [Sami + Mokaddem] +- Merge branch '2.4' into develop. [iglocska] +- Merge branch '2.4' of github.com:MISP/MISP into develop. [Christian + Studer] +- Merge pull request #9194 from MISP/JakubOnderka-patch-1. [Alexandre + Dulaunoy] + + NATO MISP only for cyber defense +- NATO MISP only for cyber defense. [Jakub Onderka] + + According to NATO MISP terms of use, NATO MISP is open only for cyber defense related governmental entities, not to all governmental entities. + + v2.4.173 (2023-07-11) --------------------- diff --git a/static/objects.html b/static/objects.html index 41af346..4166402 100755 --- a/static/objects.html +++ b/static/objects.html @@ -4,7 +4,7 @@ - + MISP Objects