What's Changed?
- Better API exception handling from users that doesn't exist in the system when it comes to quota management 🛠️
- Better support for looking up long URLs in VirusTotal from Assemblyline 🔍
- This allows you to perform more direct lookups using the
/gui/{feed}/{id}
instead of/gui/search/{ioc}
depending on your configuration
- This allows you to perform more direct lookups using the
- Fixed an issue in the "Search All" interface where navigating to the "Results" tab and clicking on any result would incorrectly open both the File Detail and the Signature Detail pages, causing a fetching error on the latter. 🐛🔍
logging.log_to_file
configuration now works as expected when enabled 🐛🗃️- We can now identify PGP symmetric encrypted files 🕵️
- DNS queries that resolve to domains are now captured by the ontology 🛠️
- Fixes to the CLI's reindex operations to eliminate the possibility of data loss due to mapping conflicts 🐛🛠️🔍
- Added support for Wildcard for fields with
MetadataValue
type in the ODM (ie.metadata.*
fields in the Submission index)
- Added support for Wildcard for fields with
Added
- Add
resolved_domains
to NetworkDNS ontology model (@cccs-mog ) - Add identification of PGP symmetric encrypted files (@gdesmar )
- Add support for different encoding formats when using ExternalLinks (supports
url
for URL-encoding andsha256
for hashing) AL-3817 (@cccs-rs, @cccs-nr )- Example: Suggested changes for the VirusTotal external source
Bugfixes
- Updated
get_remaining_quotas()
to return a404 Not Found
error when the requested user does not exist in the system, ensuring a more accurate response instead of causing an internal server error. AL-3773 (@cccs-nr) - Added the
allowHash
prop to the ResultsTable to allow the propagation of thelocation.hash
when clicking on a row. Discord (@cccs-nr) - Resolve type error when log_to_file is enabled Discord (@Hanochar)
- Fixes to index mappings (@cccs-douglass , @cccs-shellyw )
- Fix API documentation (@jpl1337)
- Fixes to "Selected Services" when displayed that include an excluded service (@cccs-nr, @gdesmar )