Enhancements:
- #5742 [virustotal] Display VirusTotal enrichment results for "undetected" observables
- #5734 [ismalicious] New enrichment integration for 'IsMalicious'
- #5242 [mitre-atlas] Migrate connector to be connector manager supported
- #5240 [valhalla] Migrate connector to be connector manager supported
- #5236 [microsoft-sentinel-incidents] Migrate connector to be connector manager supported
- #5232 [red-flag-domains] Migrate connector to be connector manager supported
- #5216 [dnstwist] Migrate connector to be connector manager supported
- #5036 [crowdstrike] Add function to import vulnerabilities
- #4584 New Splunk App "OpenCTI for Splunk Enterprise"
- #4134 [virusTotal] Add 'suspicious' and 'undetected' findings to enrichment note
- #2263 [Hygiene] Support CIDR and Partial Domains
Bug Fixes:
- #5713 [RecordedFuture] Connector does not post state in run_and_terminate mode
- #5706 [MISP Feed] connector is putting 1 operation at each run despite nothing to process
- #5688 [sekoia.io] Duplicate calls to identities
- #4886 [MISP] All original tags as set as labels if
MISP_KEEP_ORIGINAL_TAGS_AS_LABELenv var is empty
Pull Requests:
- [recorded-future] ensure all threads end before returning by @throuxel in #5721
- [red-flag-domains] Update connector to be "manager_supported" by @jabesq in #5661
- [ismalicious] New enrichment integration for 'IsMalicious' by @hexablob in #5481
- [dnstwist] Update connector to be "manager supported" by @Powlinett in #5650
- [microsoft-sentinel-incidents] Update connector to be "manager_supported" by @jabesq in #5640
- [misp] remove backward-compat workaround for original_tags_to_keep_as_labels by @ncarenton in #5705
- [SEKOIA.IO] update cache system in Sekoia connector by @mchupeau-sk in #5367
- [mitre-atlas] Update connector to be "manager_supported" by @jabesq in #5643
- [crowdstrike] Add function to import vulnerabilities (#5036) by @Kakudou in #5224
- [virustotal] Improve VT enrichment note by processing any results by @romain-filigran in #5748
- [misp-feed] Stop creating unnecessary work when there is nothing to process. by @jabesq in #5715
- [valhalla] Update connector to be "manager_supported" (#5240) by @jabesq in #5682
- [crowdstrike] fix _create_vulnerability by @throuxel in #5755
- [Doc] improve Hygiene documentation by @romain-filigran in #5697
- [ismalicious] Add logo and update supported version for isMalicious connector by @romain-filigran in #5735
- [urlscan-enrichment] Improve URLScan connector documentation to include the correct scope by @romain-filigran in #5744
New Contributors:
Full Changelog: 6.9.16...6.9.17