CybercentreCanada/assemblyline v4.4.1.dev149

on GitHub

Improvement

• Updaters (and services as a result) are more perceptive/responsive of local changes made to update sources/signatures.
• Services that have updaters will have a signatures_meta attributes that contains the metadata of the signatures relevant to the system it's deployed on.
  • For example: if a user changes the state of the signature from DEPLOYED → NOISY, then the signatures_meta attribute should be updated too so the service can account for the state change and apply analysis accordingly (ie. override section scoring to 0)
  • The signatures_meta attribute contains about the signature: classification, source, status, signature_id (key), name

    • signatures_meta = {
        "<signature_id>": {
           "classfication": "TLP:C",
           "source": "my_source",
           "status": "DEPLOYED",
           "name": "my_name"
        }
        ...
      }