Enhancements:
- #5539 [all] Quality Improvement - Chunk 4 (fix(external-import): Comprehensive fixes for J-L connectors)
- #5536 [all] Quality Improvement - Chunk 3 (fix(external-import): Comprehensive fixes for G-I connectors)
- #5534 [all] Quality Improvement - Chunk 2 (fix(external-import): Comprehensive fixes for D-F connectors)
- #5527 [all] Quality Improvement - Chunk 1 (fix(external-import): Comprehensive fixes for A-C connectors)
- #5519 [mitre-attack] Implement Kill Chain phase ordering and versionning
- #5516 [webhook] remove live as default value
- #5514 [sentinelone-intel] remove live as default value
- #5512 [logrhythm] remove live as default value
- #5510 [tanium-intel] remove live as default value
- #5508 [sumologic-intel] remove live as default value
- #5506 [pan-cortex-xsoar-intel] remove 'live' as default value for livestream id
- #5504 [taxii-post] remove 'live' as default value for livestream id
- #5502 [infoblox-threat-defense] remove 'live' as default value for livestream id
- #5500 [harfanglab-intel] remove 'live' as default value for livestream id
- #5497 [jira] remove 'live' as default value for livestream id
- #5495 [qradar] remove 'live' as default value for livestream id
- #5492 [sekoia-intel] remove 'live' as default value for livestream id
- #5490 [google-secops-siem] remove 'live' as default value for livestream id
- #5488 [backup-files] remove 'live' as default value for livestream id
- #5486 [splunk] remove 'live' as default value for livestream id
- #5484 [misp-intel] remove 'live' as default value for livestream id
- #5300 [kaspersky-enrichment] Add Domain enrichment
- #4734 [urlscan-enrichment] Migrate connector to be connector manager supported
- #4708 [Malpedia] Migrate connector to be connector manager supported
Bug Fixes:
- #5568 [diode] Diode connector is not sending data to the right queue
- #5556 [Flashpoint] Tests was not updated
- #5543 [all] Revert changes to avoid breaking changes
- #5522 [sparta] Wrong relationships for sub-techniques and mitigations
- #5439 [recorded-future] Invalid "Intrusion-Set -- uses --> Indicator" relationships
- #5295 [connectors-sdk]
BaseConnectorSettingsdoes not work with connector as module - #5218 [recorded-future] Invalid STIX relationships generated by the Recorded Future connector
Pull Requests:
- [all] Quality Improvement - Chunk 1 (#5527) by @SamuelHassine in #5531
- Update dependency google-auth-httplib2 to v0.3.0 by @renovate[bot] in #5533
- Update dependency jbxapi to v3.24.0 by @renovate[bot] in #5537
- [all] Quality Improvement - Chunk 2 (#5534) by @SamuelHassine in #5535
- [all] Quality Improvement - Chunk 3 (#5536) by @SamuelHassine in #5540
- [recorded-future] Invalid STIX relationships by @romain-filigran in #5440
- [microsoft-graph-security-intel] Add deprecation warning in README by @romain-filigran in #5526
- [webhook] remove live as default value by @mariot in #5517
- [sentinelone-intel] remove live as default value by @mariot in #5515
- [sumologic-intel] remove live as default value by @mariot in #5509
- [all] Quality Improvement - Chunk 4 (#5539) by @SamuelHassine in #5542
- [sparta] Wrong relationships for sub-techniques and mitigations by @romain-filigran in #5523
- [logrhythm] remove live as default value by @mariot in #5513
- [tanium-intel] remove live as default value by @mariot in #5511
- [pan-cortex-xsoar-intel] remove live as default value by @mariot in #5507
- [taxii-post] remove live as default value by @mariot in #5505
- [sekoia-intel] remove live as default value by @mariot in #5494
- [google-secops-siem] remove live as default value by @mariot in #5491
- [urlscan-enrichment]: set to manager supported by @mariot in #5474
- [misp-intel] remove live as default value by @mariot in #5485
- [splunk] remove live as default value by @mariot in #5487
- [harfanglab-intel] remove live as default value by @mariot in #5501
- [infoblox-threat-defense] remove live as default value by @mariot in #5503
- [Kaspersky enrichment] Add domain enrichment by @Ninoxe in #5470
- [all] Enhance docs by @SamuelHassine in #5550
- [all] Improve docs by @SamuelHassine in #5551
- [crowdstrike-endpoint-security] Update connector to be "manager_supported" by @Powlinett in #5337
- [all] Improve docs by @SamuelHassine in #5552
- [malpedia] set to manager supported by @romain-filigran in #5521
- [jira] remove live as default value by @mariot in #5498
- [qradar] remove live as default value by @mariot in #5496
- [backup-files] remove live as default value by @mariot in #5489
- [all] Quality Improvement - Chunk 5 (#5541) by @SamuelHassine in #5548
- [Flashpoint] Fix tests by @helene-nguyen in #5557
- [mitre] Implement Kill Chain phase ordering and versionning (#5519) by @romain-filigran in #5520
- [Crowdstrike Endpoint Security] Fix Wrong placement of
ignore_typesand unused variableconsumer_countby @jabesq in #5559 - [crowdstrike-endpoint-security] fix 'falcon_for_mobile_active' placeholder by @romain-filigran in #5560
- [All] Fixes to avoid breaking changes by @helene-nguyen in #5549
- [Crowdstrike-endpoint-security] Remove
ignore_typesoption and update documentation by @jabesq in #5561 - [MISP feed]: add correct scope by @mariot in #5455
- [SEKOIA.IO] Update external import connector by @mchupeau-sk in #5050
- [connectors-sdk]
BaseConnectorSettingssupport for connectors as module by @Powlinett in #5323 - [intel471_v2] Fix intervals defaults by @Powlinett in #5567
Full Changelog: 6.9.5...6.9.6