Enhancements:
- #5083 [ConnectorsSDK] Restructure the settings module
- #5080 [Aerospace Sparta]: Add external import connector
- #5079 [splunk] add detection field to sent events
- #5057 [S3] Manage a state per S3 bucket prefix
- #5017 [Crowdstrike] Create and link IOCs when import and ingest an Intrusion Set
- #4422 [Recorded Future] Source of the report listed in external reference
Bug Fixes:
- #5104 [Recorded Future] Wrong severity list in models
- #5103 [Urlhaus-Recent-Additions] Improve error handling and log message for invalid API key
- #5097 [MalwareBazaar-Recent-Additions] Improve error handling and log message for invalid API key
- #5090 [recordedfuture-enrichment] Exception when enriching vulnerability: 'NoneType' object has no attribute 'score'_
- #5081 [connectors-sdk] Add log_leveldefault value
- #5075 [RansomwareLive] Connector doesn't create reports anymore
- #5067 [Recorded Future] Validation errors on docker
- #5023 [ConnectorSDK] Fix inherited fields props
- #4927 [CircleCI] Execute the tests depending on the context
- #4852 [NTI] Running standalone NTI connector will cause the connector to crash
Pull Requests:
- [RecordedFuture] Added an external reference to point the analyst note on the RF portal by @romain-filigran in #5048
- [Composer/Hub] fix manifest use cases by @romain-filigran in #5069
- [0/2][CircleCI] Execute the tests depending on the context by @pdamoune in #5045
- [NTI] Fixed bug: Running standalone NTI connector will cause the connector to crash by @NSFOCUS-Threat-Intelligence in #4853
- [GroupIB] Added generation of TLP AMBER+STRICT by @Kchekh in #5053
- [RansomwareLive] Append missing reports in bundle_objects by @Ninoxe in #5077
- [splunk] add detection field to sent events (#5079) by @romain-becker in #5033
- [Crowdstrike] Create and link IOCs when import and ingest an Intrusion Set (#5017) by @Kakudou in #5032
- [Aerospace Sparta]: Add external import connector by @EQM-Filigran in #5018
- [Recorded Future] Fix validation error on docker compose by @Ninoxe in #5070
- [1/3][ConnectorsSDK] Restructure the models directory by @pdamoune in #5029
- [2/3][ConnectorsSDK] Fix inherited fields props by @pdamoune in #5024
- [ConnectorsSDK] Move BaseConnectorSettingsin its own module by @Powlinett in #5084
- Update dependency google-api-core to v2.27.0 by @renovate[bot] in #4947
- Update dependency isort to v6.1.0 by @renovate[bot] in #4960
- Update dependency tenacity to v9 by @renovate[bot] in #4966
- Update dependency PyYAML to v6.0.3 by @renovate[bot] in #4969
- Update dependency psutil to v7.1.2 by @renovate[bot] in #4975
- Update dependency reversinglabs-sdk-py3 to v2.11.4 by @renovate[bot] in #4980
- Update dependency ruff to v0.14.2 by @renovate[bot] in #4981
- Update pre-commit hook pycqa/isort to v6.1.0 by @renovate[bot] in #4988
- Update dependency pymisp to v2.5.17.2 by @renovate[bot] in #4997
- Update dependency cryptography to v46 by @renovate[bot] in #4972
- [S3] Manage a state per S3 bucket prefix by @romain-filigran in #5059
- [recordedfuture-enrichment] fix enrichment if risk option is not enabled by @mariot in #5091
- [MISP] Fix tags_querywhen empty by @Powlinett in #5046
- [Recorded Future] Fix wrong severity list in models by @helene-nguyen in #5106
- [MalwareBazaar-Recent-Additions] Improve error handling and log message for invalid API key by @romain-filigran in #5098
- [Urlhaus-Recent-Additions] Improve error handling and log message for invalid API key by @romain-filigran in #5105
- [connectors-sdk] Add log_leveldefault value by @Powlinett in #5085
- [connectors-sdk] Fix parsing of .envfile by @Powlinett in #5088
New Contributors:
- @romain-becker made their first contribution in #5033
- @EQM-Filigran made their first contribution in #5018
Full Changelog: 6.8.8...6.8.9