Enhancements:
- #1095 [Virustotal Downloader] Increase Confidence Level to High
- #1086 Modularization of relation refs
- #1080 [Sentinel] Stream connector to use a stream ID
- #1079 Add CaseRfi and CaseRft to export files
- #1024 [TAXII2 Client] Use Pagination
- #1014 [misp] Add an option to enforce warning lists when searching events / attributes
- #932 [misp] Guess threats using tags
- #756 [YARA search] Create the enrichment connector for artifacts
- #736 [Mandiant] Mscore is not taken into account
Bug Fixes:
- #1082 [Sentinel] Stream connectors needs a try and catch processing the message
- #1058 [connector-cape] fail to parse json when analysis report found clamAV signature
Pull Requests:
- Update Dockerfile by @lamtn1 in #1061
- Update flake8 line length to 120 by @SYNchroACK in #1077
- Update .env.dist by @lamtn1 in #1062
- Connector cape fix clamav json structure by @aakloul in #1057
- IPQS Fraud and Risk Scoring Connector by @RamboV in #1065
- [connectors] remove Case in export files and Add feedback and Case Incident by @SarahBocognano in #1097
- [taxii2] Added pagination to taxii connector by @annoyingapt in #1091
- [mandiant] Added mscore to mandiant connector by @annoyingapt in #1090
- [Sentinel] adding a try to avoid crashing the container whenever it c… by @RaulSokolova in #1093
- [ivre/shodan] Migrate Stix Cyber Observable Relationship to Stix Ref Relationship by @RomuDeuxfois in #1087
- [connectors] Add CaseRfi and CaseRft to export files (#issue/1079) by @SarahBocognano in #1098
- [internal-enrichment][LastInfoSec] We are now able to contextualize url also by @remydewa in #1089
- [Virustotal Downloader] Increase Default Confidence Level to 100, resolves #1095 by @YungBinary in #1096
- Introduce the YARA connector by @mattreduce in #1094
New Contributors:
- @lamtn1 made their first contribution in #1061
- @RamboV made their first contribution in #1065
- @annoyingapt made their first contribution in #1091
Full Changelog: 5.6.2...5.7.0