forked from MISP/PyMISP
-
Notifications
You must be signed in to change notification settings - Fork 0
/
CHANGELOG.txt
2342 lines (1941 loc) · 78.6 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changelog
=========
v2.4.111.2 (2019-07-22)
-----------------------
New
~~~
- [Sightings] Delete method. [Raphaël Vinot]
Fix #230
- [tests] non-exportable tags. [Raphaël Vinot]
Changes
~~~~~~~
- Bump verison. [Raphaël Vinot]
- Make pythonify=False default everywhere. [Raphaël Vinot]
Add a method to toggle pythonify globally
- [tests] Update stats. [Raphaël Vinot]
- [tests] Remove travis exceptions. [Raphaël Vinot]
Fix
~~~
- [tests] Path to test file. [Raphaël Vinot]
Fix #423
- [objects] Allow the value of an attribute to be 0. [Raphaël Vinot]
- [tests] Disable one of the test cases for now. [Raphaël Vinot]
- [tests] By default, the workflow taxonomy isn't enabled. [Raphaël
Vinot]
- Properly handle fallbacks add/update/delete attributes. [Raphaël
Vinot]
- [add_attribute] Only create a proposal when needed. [Raphaël Vinot]
Other
~~~~~
- Fix for issue 420. [github-pba]
v2.4.111.1 (2019-07-18)
-----------------------
New
~~~
- Add option to locally expand malware samples with LIEF. [Raphaël
Vinot]
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Remove legacy tests. [Raphaël Vinot]
- Improve deprecation message on PyMISP. [Raphaël Vinot]
- [describeTypes] updated to add community-id. [Alexandre Dulaunoy]
- Bump examples to python3. [Raphaël Vinot]
- Reorganise ExpandedPyMISP methods, normalise the parameters. [Raphaël
Vinot]
- Deprecate everything in PyMISP. [Raphaël Vinot]
Fix
~~~
- Python < 3.6 support. [Raphaël Vinot]
Other
~~~~~
- Create statistical reports for MISP. [Koen Van Impe]
PyMISP script to run every x-days to get an overview of new
events/attributes ; MISP-Galaxies ; MITRE ; Tags
Output of report is on screen or sent via e-mail ; all stats attached
as CSV
v2.4.111 (2019-07-12)
---------------------
New
~~~
- Introduce ability to create a sharing group. [Tom King]
- Allow to pass delimiter & quotechar to the CSV loader. [Raphaël Vinot]
- [example] Added edit_organisation examples. [Steve Clement]
- Method to POST a STIX file to MISP and create a new event. [Raphaël
Vinot]
- Object generator for ssh authorized_keys files. [Raphaël Vinot]
- Allow custom user-agent. [Christophe Vandeplas]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bumb misp-objects. [Raphaël Vinot]
- [tests] WTF upload_sample on travis. [Raphaël Vinot]
- [tests] Add custom error message on upload_sample - fix last commit.
[Raphaël Vinot]
- [tests] Add custom error message on upload_sample. [Raphaël Vinot]
- Remove roaming as it can't be set in this request. [Tom King]
- Allow for deletion of security group. [Tom King]
- Bump dependencies. [Raphaël Vinot]
- [last] You can now paginate over multiple results in the last example
command. [Alexandre Dulaunoy]
You can do stuff like this:
python3 last.py -l 48h -m 10 -p 2 | jq .[].Event.info
which means the last 10 events on second page which are between a
time range of 0 and 48 hours.
- [tests] now deleted flag is returning only the deleted values (to be
consistent) [Alexandre Dulaunoy]
- [misp-objects] updated to the latest version. [Alexandre Dulaunoy]
- Bump deps (lief 0.10 dev) [Raphaël Vinot]
- Use pydeep from pypi, add test. [Raphaël Vinot]
- Bump dependencies. [Raphaël Vinot]
- Bump dependencies. [Raphaël Vinot]
- Bump Pipfile for python 3.7. [Raphaël Vinot]
Fix
~~~
- Skip attribute in object when value is empty, skip empty objects.
[Raphaël Vinot]
- [perms] Added try/except for various permission conditions, also
create the output dir if not exist fix: [try/except] Catch Ctrl-c
keyboard interrupt fix: [style] isort imports. [Steve Clement]
- [direct_call] Allows the response type to be something else than a
JSON (e.g. csv). [mokaddem]
- [feed generator] Added missing fields. [iglocska]
- Properly fix deprecation warning. [Raphaël Vinot]
fix #390
- Travis & python2. [Raphaël Vinot]
- Last commit foobar. [Raphaël Vinot]
- Install lief on python < 3.7 with pipenv. [Raphaël Vinot]
Other
~~~~~
- [openioc] changed default mapping for
RouteEntryItem/Destination/string. [0x3c7]
- [openioc] Changed mapping for RouteEntryItem/Destination/string to
domain instead of url because UrlHistoryItem/URL is mostly used for
urls. [0x3c7]
- Fixes other mapping to other types. [0x3c7]
- [openioc] Allow the use of types in openioc content tags. [0x3c7]
- Sync sightings between MISP servers. [Koen Van Impe]
Sync sightings between MISP servers
Sync from multiple clients to one authoritative MISP instance.
To be run from cron
(blog docu coming)
- Added includeWarninglistHits as a possible filter for the event level
restsearch. [Jeroen Pinoy]
- Resolve issue with change_sharing_group which do not update event
successfully. [hrifflet]
- Use misp_verifycert flag. [Koen Van Impe]
- Take 'to_ids' setting in account and PEP8 checks. [Koen Van Impe]
- Include check if 'to_ids' is included in the data returned from the
import module
- PEP8 checks
- Automation script that links vmray_submit and vmray_import. [Koen Van
Impe]
Import finished VMRay tasks ; add attributes to event
Makes use of the 'incomplete' workflow taxonomy
Needs to be put in a cronjob to run in the background
- Update PyMISP_tutorial.ipynb. [Carlos Borges]
The function to collect event_id and put it into a list isn't looking into each MISPAttribute.
Just updated the script to look it.
v2.4.106 (2019-04-24)
---------------------
New
~~~
- Test cases for attributes and proposals. [Raphaël Vinot]
- Improve python3.6+ lib. [Raphaël Vinot]
- Add_attributes method in MISPObject (for multiple attributes) [Raphaël
Vinot]
- Method to set the default role. [Raphaël Vinot]
- Default to "me" in the get_user method, update ExpandedPyMISP.
[Raphaël Vinot]
Fix #377
- Add get_object to ExpandedPyMISP. [Raphaël Vinot]
Fix #372
- Test cases for CSV loader, add cleaner methods in ExpandedPyMISP.
[Raphaël Vinot]
- Add CSV loader. [Raphaël Vinot]
Fix #376
- Helper to create MISP Objects for regcheck.org.uk. [Raphaël Vinot]
- Test for ACLs in testlive. [Raphaël Vinot]
- Test for manual calls to add_object and add_object_reference. [Raphaël
Vinot]
- Test update object in event. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump Objects. [Raphaël Vinot]
- Bump version, Bump changelog. [Raphaël Vinot]
- Add python 3.7 support for pipenv users. [Raphaël Vinot]
- Allow to pass a eml as string to EmailObject. [Raphaël Vinot]
- Bump dependencies. [Raphaël Vinot]
Fix CVE-2019-11324 (urllib3)
- Bump dependencies. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Allow to pass an AbstractMISP to add_reference. [Raphaël Vinot]
Fix #379
- Rework notebooks. [Raphaël Vinot]
- Bump dependencies. [Raphaël Vinot]
- Display an error on failure in testlive. [Raphaël Vinot]
- Add tests for disable_tag. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Reorganize some tests. [Raphaël Vinot]
- Orders of tests in make_bool. [Raphaël Vinot]
- Bump dependencies. [Raphaël Vinot]
- Initial set of refactoring on PDF generator. [Raphaël Vinot]
- Add i8n for pdfexport, without all the fonts in the main repo.
[Raphaël Vinot]
Fix
~~~
- Bump Test files because of new template version. [Raphaël Vinot]
- Build on readthedocs. [Raphaël Vinot]
- [typo] Fixed a small typo I noticed in the docs. [Steve Clement]
- Add missing files for testing (CSV loader) [Raphaël Vinot]
- Properly test query ACLs. [Raphaël Vinot]
- Update all json submodules at one place in testlive. [Raphaël Vinot]
- Disable some tests for the run on travis. [Raphaël Vinot]
- [exportpdf] Doc update. [Falconieri]
- [exportpdf] Coding Style. [Falconieri]
- Improper handling of to_ids passed as integer in MISPEvent. [Raphaël
Vinot]
Fix #364
- Do not fail when importing the reportlab file. [Raphaël Vinot]
- PDF Export requires python 3.6+. [Raphaël Vinot]
- Do not run PDF Export tests on python < 3.6. [Raphaël Vinot]
- [exportpdf] Custom path for fonts and font package. [Falconieri]
- Allow to use global variables HTTP_PROXY and HTTPS_PROXY again.
[Raphaël Vinot]
Fix #365
- Slight changes in new .change_disable_correlation method. [Raphaël
Vinot]
- Get_object_template_id was broken. Add test case. [Raphaël Vinot]
Fix #361
Other
~~~~~
- New Add test for ASNObject. [Raphaël Vinot]
- Update README.md. [Steve Clement]
Added number of monthly PyPi downloads
- Add: [exportpdf] documentation added about exportPDF. [Falconieri]
- Fix for "'NoneType' object has no attribute 'setdefault'" [Jacco
Ligthart]
- Fix a type on function name. [l3m0ntr33]
- Add new function
PyMISP.change_disablecorrelation(attribute_uuid,disable_correlation)
to be able to enable/disable correlation on attributes. [hrifflet]
v2.4.103 (2019-03-01)
---------------------
New
~~~
- [badge] Added pypi and python version badge. [Steve Clement]
- Add auth parameter to pass to python-requests. [Raphaël Vinot]
- Add readthedocs config. [Raphaël Vinot]
Changes
~~~~~~~
- Build all formats for the documentation. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- [jupyter] remove all the response key (as response is removing it)
[Alexandre Dulaunoy]
- Enforce strict in object testing to ease debugging. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- [pipenv] Pipfile.lock generated. [Alexandre Dulaunoy]
- [exportpdf] BIG refactoring. Classes, comments, Galaxy starting.
[Falconieri]
- [exportPDF] add basic handling of clusters. [Falconieri]
- [exportpdf] Add metadata, bugfixes cases (too long values,
sanitization), links to misp instances. [Falconieri]
- Add sphinx-autodoc-typehints. [Raphaël Vinot]
- Use version 2 of readthedoc config file. [Raphaël Vinot]
- [doc] add a reference to the Jupyter Notebook. [Alexandre Dulaunoy]
- Remove dependency on six. [Raphaël Vinot]
Fix
~~~
- [exportpdf] fix empty object/attribute/galaxy bugs. [Falconieri]
- [exportpdf] Add suggestions (UX) [Falconieri]
- [exportpdf] switch page size to A4. [Falconieri]
- [exportpdf] switch page size to A4. [Falconieri]
- Hopefully last fix for python 2.7 & reportlab. [Raphaël Vinot]
- Python 2.7 blah foo. [Raphaël Vinot]
- Bump tests relatively to the file template. [Raphaël Vinot]
- Let's act as if python2 doesn't exists. [Raphaël Vinot]
- Properly pass the auth parameter to the request. [Raphaël Vinot]
- Properly catch error if reportlab isn't installed. [Raphaël Vinot]
- Make sure install works even without reportlab installed. [Raphaël
Vinot]
- [gitmodules] revert to official misp-objects. [Steve Clement]
- URLJoin condition for double quotes. [Hannah Ward]
- Do not override sub-path from root URL. [Hannah Ward]
- [exportpdf] None if no Galaxies bug. [Falconieri]
- [reportlab] Galaxies and Clusters printing. [Falconieri]
- [reportlab] Clusters added. Still UX to perform. [Falconieri]
- [reportlab] working clusters and galaxies. Not nice however.
[Falconieri]
- [exportPDF] Adding facultative text description, sightings, tests
cases. [Falconieri]
- [exportpdf] Add Object date. [Falconieri]
- [exportpdf] Double property printing error fixed. [Falconieri]
- [exportpdf] Refactoring, nicer code. [Falconieri]
- [exportpdf] tests paths. [Falconieri]
- [exportpdf] Remove comment that codefactor doesn't like. [Falconieri]
- [pdfexport] Fix tests paths, dependency in pipfile, imports, and
'file' name overwrite in test function. [Falconieri]
- Copy event dictionary when creating a MISPEvent. [Raphaël Vinot]
Fix #321
- Wrong documentation on PyMISP.search_sightings. [Raphaël Vinot]
Fix #336
- Disable all logging in the tests. [Raphaël Vinot]
- Typo in sphinx config. [Raphaël Vinot]
- Typo in documentation. [Raphaël Vinot]
- Fix dependencies for py2. [Raphaël Vinot]
- Disable STIX test on travis. [Raphaël Vinot]
- Properly inform user when they try to run the live tests on old
systems. [Raphaël Vinot]
Fix #329
Other
~~~~~
- Re-bump changelog. [Raphaël Vinot]
- - Set my misp-objects… [Steve Clement]
- Add : [exportpdf] Objects handling, tests cases, test files.
[Falconieri]
- Add: [exportpdf] Handling pictures embedded as attributes.
[Falconieri]
- Add : [exportpdf] Picture management, manual. [Falconieri]
- Fix & add: [exportpdf] Add metadata, fix special cases (too long
values, sanitization) [Falconieri]
- Add: exportpdf tool working. [Falconieri]
- General improvement : deisgn, exhaustiviness of mispEvent values
displayed, good pratice concerning paragraphe/table made. [Falconieri]
- Update with table basics. [Falconieri]
- Structure of the improvements OK : test file, test folder, report
generator. [Falconieri]
- Search function fix to comply new version of MISP. [Armīns Palms]
v2.4.102 (2019-02-03)
---------------------
New
~~~
- Add test cases for stix export. [Raphaël Vinot]
Changes
~~~~~~~
- Bump Version & changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- [datamodel] new anonymised type added. [Alexandre Dulaunoy]
- [data] types updated to include the new zeek type. [Alexandre
Dulaunoy]
Other
~~~~~
- Check if IOC values are in warninglist. [Armīns Palms]
v2.4.101 (2019-01-28)
---------------------
New
~~~
- Add missing test case for NOT on attribute level, update Pipfile.
[Raphaël Vinot]
- Add support for unix timestamp in set_date. [Raphaël Vinot]
fix #302
- Add test for references when adding/updating a full event. [Raphaël
Vinot]
- Bump describe types. [Raphaël Vinot]
fix #317
- [usersStats] Possibility to fetch users/statistics data for all
context (usage, org, tags, ...) [Sami Mokaddem]
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Bump version, misp-objects. [Raphaël Vinot]
- Force to_ids to be a boolean, as MISP is expecting. [Raphaël Vinot]
fix #320
- Add support for sharing group filter for search_index. [Tom King]
- Support for Payload Delivery > Other attribute as PyMISP function.
[Tom King]
- Add Pipfile config. [Raphaël Vinot]
- [data] fix describeTypes. [Alexandre Dulaunoy]
- [data] new types added (hassh-md5 and hasshserver-md5) [Alexandre
Dulaunoy]
- Bump misp-objects. [Raphaël Vinot]
- [misp-objects] templates updated to the latest version. [Alexandre
Dulaunoy]
- [data] describeTypes updated (grabbed from MISP HEAD) [Alexandre
Dulaunoy]
- [data] ja3-fingerprint-md5 type added. [Alexandre Dulaunoy]
- [test] set a default distribution for massive event creation.
[Alexandre Dulaunoy]
- [data] describeTypes.json updated to the latest version. [Alexandre
Dulaunoy]
- More flexibility when loading an object from python dict. [Raphaël
Vinot]
- Pass all parameters to the search API. [Raphaël Vinot]
- Remove compat for MISP 2.4.52, cleanup. [Raphaël Vinot]
- Set verifycert to false in tests. [Raphaël Vinot]
- [tests] Added verifycert option in case of using self-signed cert.
[Steve Clement]
Fix
~~~
- Remove jupyter & ipython from dev install so it works with python2.
[Raphaël Vinot]
- Wrong variable name in MISPEvent. [Raphaël Vinot]
- Documentation error fix #278. [Raphaël Vinot]
- Attempt to fix memory footprint in MISPAttribute. [Raphaël Vinot]
- Still support simple event dict content. [Raphaël Vinot]
- Don't modify event passed to the add_attribute methods. [Raphaël
Vinot]
fix #321
- The wrong class name was used when there is an error at Event
creation. [Raphaël Vinot]
- Use new API in get_csv.py. [Raphaël Vinot]
Fix #314
- Test case was broken. [Raphaël Vinot]
- Create massive event using ExpandedPyMISP. [Raphaël Vinot]
- Error vs errors key. [Raphaël Vinot]
- Typo. [Raphaël Vinot]
- Get_object_template_id. [Christophe Vandeplas]
Other
~~~~~
- Update pymisp tutorial. [Sandro Winkler]
Extract the "response" field from the json result returned by misp.search_index
- Sort describeTypes.json output. [Christophe Vandeplas]
This is needed for the compatibility with the gen_misp_types_categories.py script. Data was sorted using the order_dict function of the gen_misp_types_categories script.
v2.4.99 (2018-12-06)
--------------------
New
~~~
- Auto generate doc for PyMISPExpanded. [Raphaël Vinot]
Changes
~~~~~~~
- Bump Changelog, again. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects & describeTypes. [Raphaël Vinot]
Fix
~~~
- Auto generate doc for PyMISPExpanded. [Raphaël Vinot]
Other
~~~~~
- Dded get_object & get_attribute. [DragonDev1906]
- Fix for last pymisp version. [garanews]
v2.4.98 (2018-12-03)
--------------------
New
~~~
- Search_index in ExpandedPyMISP, cleanup, update jupyter. [Raphaël
Vinot]
- Add log search. [Raphaël Vinot]
- Add test for pushing an event to ZMQ. [Raphaël Vinot]
- Change_distribution method. [Raphaël Vinot]
- Add test cases for sightings, cleanup. [Raphaël Vinot]
- [example] Added sighting rest search example. [Sami Mokaddem]
- [sighting] Added support of sighting REST API. [Sami Mokaddem]
- Allow to pass csv to return_format in search. [Raphaël Vinot]
- Page/limit in search. [Raphaël Vinot]
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add test cases for default distribution levels. [Raphaël Vinot]
- Include proposals in attributes search. [Dawid Czarnecki]
Add includeProposals param to the search method
- Bump misp-objects. [Raphaël Vinot]
- Update readme to document testing. [Raphaël Vinot]
- Fixes & update Jupyter. [Raphaël Vinot]
- [tuto] Update search. [Raphaël Vinot]
- Add a script to load the API key from the file system (training VM)
[Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add print in testlive to debug travis. [Raphaël Vinot]
- Bump objects. [Raphaël Vinot]
Fix
~~~
- Test failing on travis... [Raphaël Vinot]
- Properly handle errors on event creation/update. [Raphaël Vinot]
- Test case. [Raphaël Vinot]
- Do not run the zmq test on travis. [Raphaël Vinot]
- Type of quick_filter. [Raphaël Vinot]
- Quick_filter was broken. [Raphaël Vinot]
- Properly initialize the config when jupyter runs on the VM. [Raphaël
Vinot]
- Travis run. [Raphaël Vinot]
- Readme update + python3 + pep8. [Christophe Vandeplas]
align python path to readme specifying python3
- Feed-generator gitignore. [Christophe Vandeplas]
- Test cases. [Raphaël Vinot]
- Test cases sample files. [Raphaël Vinot]
Other
~~~~~
- Mention virtualenv. [Alexander J]
mide make sense for people who want to use it with virtualenv
- Be more precise with the supported time indicators. [Sascha
Rommelfangen]
- Fixed documentation bug. [Sascha Rommelfangen]
- Fixes date parameters for search_index() function. [Nils Kuhnert]
- Align examples on custom usage of misp_verifycert. [juju4]
v2.4.96 (2018-10-12)
--------------------
New
~~~
- [freedFromRedis] try to create an object/attribute out of the incoming
data even if not added with the helper. [Sami Mokaddem]
- Direct_call without data means GET. [Raphaël Vinot]
- Add direct call to just post data on a URL. [Raphaël Vinot]
- Tests for update modules. [Raphaël Vinot]
- Tests for upload_sample. [Raphaël Vinot]
- Add more test cases. [Raphaël Vinot]
- Update warninglists. [Raphaël Vinot]
- Add test for warninglists. [Raphaël Vinot]
- Toggle warning list, add test case. [Raphaël Vinot]
- Add lots of test cases, find lots of bugs. [Raphaël Vinot]
- Use new CSV interface, add test cases. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Allow to pass a json string to direct_call. [Raphaël Vinot]
- More test cases. [Raphaël Vinot]
- Update order parameters & doc. [Raphaël Vinot]
- Add an extra IP from the warninglists. [Raphaël Vinot]
- Test for event UUID in attribute. [Raphaël Vinot]
Fix
~~~
- Prevent checking length on a integer. [Sami Mokaddem]
- Direct call & add example. [Raphaël Vinot]
- Disable test for travis, take 2. [Raphaël Vinot]
- Disable test for travis. [Raphaël Vinot]
- Skip tests that fail on travis for no reason... [Raphaël Vinot]
- Tentative to fix tests on travis. [Raphaël Vinot]
- Disable test warning lists. Enabling is not deterministic. [Raphaël
Vinot]
- Use proper dependency (enum34) [Raphaël Vinot]
- Make travis happy again. [Raphaël Vinot]
- Python2 support. [Raphaël Vinot]
Fix #274
Other
~~~~~
- Fixed leaked taxonomy tags problem. [netjinho]
- Added some getters and setters for taxonomies, warninglists,
noticelists and tags & documentation. [netjinho]
- Added update_galaxies and update_taxonomies. [netjinho]
- Add: Advanced Extraction to upload_sample. [root]
- Add: update noticelists and object templates. [Raphaël Vinot]
- Add: Add __eq__ to AbstractMISP. [Raphaël Vinot]
Allow to discard duplicate tags.
- Add: more test cases. [Raphaël Vinot]
- Fix invalid py2 keyword. [Georges Toth]
- - Add description from README.md as long-description -> displayed on
pypi. - Add project related URLs to be displayed on pypi. [Georges
Toth]
v2.4.95.1 (2018-09-06)
----------------------
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
v2.4.95 (2018-09-06)
--------------------
New
~~~
- Add helpers for new server related APIs. [Raphaël Vinot]
Fix #266
- [test] Attribute modification. [Raphaël Vinot]
- More test cases, bug fixes. [Raphaël Vinot]
- Reworking the REST API (WiP) [Raphaël Vinot]
- Add Jupyter for search. [Raphaël Vinot]
Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- [data-model] updated describeTypes file. [Alexandre Dulaunoy]
- Fix testing. [Raphaël Vinot]
- More testing improvments. [Raphaël Vinot]
- Finish rewrite testing. [Raphaël Vinot]
- Rework test cases. [Raphaël Vinot]
- Add more test cases. [Raphaël Vinot]
- Make it possible to run the tests manually. [Raphaël Vinot]
- Print error message. [Raphaël Vinot]
- Remove tests on python 3.5. [Raphaël Vinot]
- Added email-header attribute. [Tom King]
- Updated types/categories mapping. [Christophe Vandeplas]
- Open all json files as bytes before loading in json. [Raphaël Vinot]
- [MISP] update to the latest version of the describeTypes. [Alexandre
Dulaunoy]
- Bump misp-objects. [Raphaël Vinot]
- Add travis tests on python 3.7. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add comments. [Raphaël Vinot]
Fix #242
- Bump misp-objects. [Raphaël Vinot]
- [PyMISP] describeTypes.json updated to add XMR type. [Alexandre
Dulaunoy]
Fix
~~~
- Normalizing the outputs. [Raphaël Vinot]
- Jerry rig support for old python. [Raphaël Vinot]
- Format of the describeTypes. [Alexandre Dulaunoy]
- [search.py] more example of query type added. [Alexandre Dulaunoy]
- Tests are passing fine now. [Raphaël Vinot]
- Properly validate the last-type search query. [Raphaël Vinot]
- Live test failing on list order. [Raphaël Vinot]
- Add dependency. [Raphaël Vinot]
- Py3.5 compat, take 2. [Raphaël Vinot]
- Py3.5 compat. [Raphaël Vinot]
- Opening the json blobs as bytes was buggy. [Raphaël Vinot]
- One more failing test. [Raphaël Vinot]
- Tests were failing. [Raphaël Vinot]
- Allow boolean parameters in search_index. [Raphaël Vinot]
- Typo in OpenIOC script. [Raphaël Vinot]
Fix #237
- Bad URL in get_attachment. [Raphaël Vinot]
Fix #240
- Improve error message in case the object template is unknown. [Raphaël
Vinot]
Other
~~~~~
- Fix #270 uniquely identifying sample. [Steffen Sauler]
- Fix print. [Deborah Servili]
- Revert "chg: Add travis tests on python 3.7" [Raphaël Vinot]
- Yara_dump - fixed private rules causing issues. [Christophe Vandeplas]
v2.4.93 (2018-07-01)
--------------------
New
~~~
- Add many comments in the jupyter notebook. [Raphaël Vinot]
- Return the new object in `add_object` [Raphaël Vinot]
- Add the ability to add Other attributes via the API. [Paul Stark]
- Tuto for MISPEvent. [Raphaël Vinot]
- Load Org and Orgc as MISPOrganisation. [Raphaël Vinot]
Related to #239
Changes
~~~~~~~
- Bump changelog, again. [Raphaël Vinot]
- Bump changelog & version. [Raphaël Vinot]
- Moar jupyter. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add full example. [Raphaël Vinot]
- Add few more calls. [Raphaël Vinot]
- Fix sample retrieval from new-style zips. [Xavier Mehrenberger]
- Bump misp-objects. [Raphaël Vinot]
- Raise an exception if the response is not in JSON. [Raphaël Vinot]
Other
~~~~~
- Enabled published search parameter for attributes controler. [Tobias
Mainka]
- Added unzip-flag. [Steffen Sauler]
added: download_samples(..., unzip=True)
v2.4.92.1 (2018-06-05)
----------------------
Changes
~~~~~~~
- Bump version. [Raphaël Vinot]
- Bump changelog. [Raphaël Vinot]
Fix
~~~
- Index out of range in add_object. [Raphaël Vinot]
v2.4.92 (2018-06-05)
--------------------
New
~~~
- Add edit_object, simplify add_object. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
Fix
~~~
- Correct docstring of search method. [iso]
- Response data type mismatch in _send_attributes() [Raphaël Vinot]
Fix #206
- Decoding issue. [Raphaël Vinot]
Other
~~~~~
- Fix issue when adding multiple attributes and the instance is too
slow. [Raphaël Vinot]
v2.4.90.1 (2018-05-09)
----------------------
New
~~~
- Properly implement the Email object creator. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Normalize the RestResponse calls. [Raphaël Vinot]
Fix
~~~
- Wrong version. [Raphaël Vinot]
- Properly get and decode the body of the email. [Raphaël Vinot]
- Provide the extension of the EML file to attach. [Raphaël Vinot]
- Properly handle attachments. [Raphaël Vinot]
- Test cases & attributes automatically getting an UUID. [Raphaël Vinot]
- Typo in the *feed methods. [Raphaël Vinot]
v2.4.90 (2018-04-25)
--------------------
New
~~~
- Add more feed management methods. [Raphaël Vinot]
Fix #221
- Add update_attribute method. [Raphaël Vinot]
- Add event_timestamp to REST search. [Raphaël Vinot]
Fix #220
- Add helper for Geolocation object. [Raphaël Vinot]
- Add helper for ASN object. [Raphaël Vinot]
- More flexibility in <something> -> datetime. [Raphaël Vinot]
- Add helper for DomainIP. [Raphaël Vinot]
- Add preliminary fail2ban object. [Raphaël Vinot]
Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add more examples. [Raphaël Vinot]
- Remove useless timestamp cleanup. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Make object helpers more generic, cleanup. [Raphaël Vinot]
- Update fail2ban helper & example. [Raphaël Vinot]
- Bump misp-object. [Raphaël Vinot]
Fix
~~~
- Use the recommended approach to add an attribute. [Raphaël Vinot]
- Tests, new template version. [Raphaël Vinot]
- New key - extends_uuid. [Raphaël Vinot]
- Update test file accordingly to the default value. [Raphaël Vinot]
- Geolocation object filename. [Raphaël Vinot]
- Consider a timestamp < 30000000 as a date. [Raphaël Vinot]
- Typo. [Raphaël Vinot]
- AbstractMISP.from_dict() do not accept positional argument. [Sami
Mokaddem]
- Typo. [Raphaël Vinot]
- Properly create fail2ban object. [Raphaël Vinot]
- Add Info field to the event. [Raphaël Vinot]
- Disable email object for python <3.6. [Raphaël Vinot]
Other
~~~~~
- Added missing field to feed generator. [Andras Iklody]
- Add the ability to add an Autonomous System(AS) via the API. [Paul
Stark]
- Typo. [Sami Mokaddem]
- Changed shebang to python3. [Sami Mokaddem]
- Update default category for url as in
https://github.com/MISP/MISP/pull/3119. [Nils Kuhnert]
- Deleted remaining outputs. [Sami Mokaddem]
- First jupyter notebook tutorial (1 iterations) [Sami Mokaddem]
- Added change_analysis_status API. [Matteo Lodi]
- Fix add_named_attribute regression, update add_named_attribute.py
example. [user]
- Example of specifying special attribute type in your search: here yara
attribute. [Philippe Langlois]
v2.4.89 (2018-03-23)
--------------------
New
~~~
- Add email object generator. [Raphaël Vinot]
- Method to return an object by uuid. [chrisr3d]
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
Fix
~~~
- Test files. [Raphaël Vinot]
- Do not try to upload objects in case make_binary_objects fails.
[Raphaël Vinot]
Fix #192
- Typo. [chrisr3d]
- Update reference test cases. [Raphaël Vinot]
Other
~~~~~
- Update README.md. [Sami Mokaddem]
Replaced WHAT by Description
- Update README.md. [Sami Mokaddem]
Added example of flush operation
- Added more examples. [Sami Mokaddem]
- Added usage in README. [Sami Mokaddem]
- Added MISPItemToRedis and updated readme accordingly. [Sami Mokaddem]
- Updated readme 2. [Sami Mokaddem]
- Updated readme. [Sami Mokaddem]
- Moved object constructor into their own folder. [Sami Mokaddem]
- Feature: Added support of MISP object constructor instead of the
generic_generator. [Sami Mokaddem]
- Added brief object description. [Sami Mokaddem]
- Removed unused function. [Sami Mokaddem]
- Generator handles file flushing itself. [Sami Mokaddem]
- Added description of generator object. [Sami Mokaddem]
- Updated README. [Sami Mokaddem]
- Creation of the generator object which permit to easily add attributes
and objects to daily events, stored as a MISP feed. Plus, script
fromredis which pops queue element in redis to put them in the feed.
[Sami Mokaddem]
- Added install script. [Sami Mokaddem]
- Added support of MISP Object. [Sami Mokaddem]
- Overhall seems to work, need testing. [Sami Mokaddem]
- Init draft of redis to feed. [Sami Mokaddem]
- Fix typo(s) [weslambert]
- Point to right anchor for client side certificates. [Richard van den
Berg]
- Add misp2cef example. [Richard van den Berg]
- Use from_dict. [Richard van den Berg]
- Add search on sighting. [ANSSI-BSO-D]
added the possibility to search sightings :
Here some example :
```python
print(misp.sighting_list(424242))
```
The answer will give a sighting list corresponding to the attribute 424242.
```python
print(misp.sighting_list(element_id=42, org_id=2, scope=event))
```
The return will be a sighting list of event 42 with a filter for organisation 2.
- Add attributes within objects as well, for tagging via value/id/uuid.
[Tobias Mainka]
v2.4.87.1 (2018-02-13)
----------------------
New
~~~
- APIs to manage sharing groups. [Raphaël Vinot]
Fix #185
- ReturnMetaAttributes flag for freeTextImport API. [Raphaël Vinot]
Fix #188
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes (add mime) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]
Fix
~~~
- Encode string in _encode_file_to_upload. [Raphaël Vinot]
Other
~~~~~
- Prevent unpublished events to be included in feed. [Koen Van Impe]
Change default proposed config
v2.4.87 (2018-01-28)
--------------------
New
~~~
- Add bindings for Galaxies and Taxonimies. [Raphaël Vinot]
- Add bindings to PyMISPWarninglists. [Raphaël Vinot]
Changes
~~~~~~~
- Version bump. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Skip sample upload test on python 3.4. [Raphaël Vinot]
- Re-enable python3.4 on travis... [Raphaël Vinot]
- Bump misp-object & describeTypes. [Raphaël Vinot]
- Cleanup new sbsignature generator. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Use defaultdict when possible. [Raphaël Vinot]
- Raise an exception when distribution is sharing group, but the ID is
missing. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]