Enhancements:
- #3690 [Zscaler] Modified category blacklist from "URLs retaining parent category" to "Custom URLs"
- #3664 Add new connector to Microsoft Defender legacy intel to sync TAXII collections
Bug Fixes:
- #3694 Mandiant reports are merged together without reason and the STIX report does not have predictive STIX ID
- #3670 [Shodan-internetDB] - Fix remove use of deprecated pycti api call
- #3666 [Wiz] The comparison between entity['modified'] and state['last_run'] is not performing correctly
- #3633 [harfanglab] Undefined value
- #3621 [bambenek]: Incorrect STIX identifiers generation exception
- #3620 [bambenek]: ModuleNotFound exception on connector launch in docker
- #3506 [Ransomware live] Create relationships with the wrong sectors
- #3480 [Recorded Future]: Errors when ingesting IPV6-type observables linked to alerts
- #3374 [ransomwarelive] UnboundLocalError: cannot access local variable 'relation_sec_TA' where it is not associated with a value
- #2835 [Ransomware] : broken code (hopefully) unreachable
Pull Requests:
- Update dependency boto3 to v1.37.17 by @renovate in #3657
- [microsoft / sentinelone] Rename connectors by @SamuelHassine in #3663
- [wiz] fix: author, marking, external references, use of update by @pdamoune in #3634
- [wiz]: fix: Unify and fix datetime comparison by @pdamoune in #3667
- fix(shodan-internetdb): Remove use of deprecated pycti api call by @pdamoune in #3671
- [Bambenek] fix: stix id should be determinist, correct observable type is Domain-Name, generated stix objects should be sent to the platform by @romain-filigran in #3660
- [RansomwareLive] Remove deprecated variable env update existing data by @Megafredo in #3683
- [Ransomwarelive] Fix relationships with the wrong sectors by @Megafredo in #3681
- [RansomwareLive] Fix error relation_sec_TA by @Megafredo in #3684
- [Zscaler] Modified category blacklist by @MohamedMerimi in #3548
- [Recorded Future] Fix handling of IPv6 addresses from RF alerts by @Powlinett in #3686
Full Changelog: 6.5.9...6.5.10