Enhancements:
- #7284 feat(flare): improve filtering options
- #7255 feat(import-external-reference): migrate connector to the catalog
- #7219 feat(import-document): migrate connector to the catalog
- #7217 feat(import-file-misp): migrate connector to the catalog
- #7216 feat(import-file-yara): migrate connector to the catalog
- #7215 feat(import-ttps-file-navigator): migrate connector to the catalog
- #7141 feat(assetnote-import):
- #7131 feat(ci): add CI check enforcing a 250-character max length for
short_descriptionin connector manifests - #7119 feat(decoupling): send manifest fragment
- #6198 refactor(phishunt): use single open feed endpoint (feed.json) and remove API-key split logic
Bug Fixes:
- #7359 fix(infoblox): 'HttpUrl' object has no attribute 'rstrip'
- #7325 fix(infoblox-threat-defense): Make CSP endpoint URL configurable (support regional deployments)
- #7294 fix(domaintools-iris-detect): handle response errors and clean up request parameters
- #7272 fix(microsoft-defender-intel): URL indicators containing query params (?, &) fail to sync (400 Bad Request)
- #7229 fix(cve): NVD 404 error and duplicate connector logs hide the real "Invalid apiKey" cause
- #7190 fix(crowdstrike-recon): connector gets permanently stuck after a PAGINATION_LIMIT_EXCEEDED error from query_notifications
- #6780 fix(shodan-internetdb): run() calls _process_message instead of process_message causing excessive Elasticsearch writes on errors
- #6593 fix(ransomwarelive): incorrect TLP:WHITE STIX id reference
- #6177 fix(phishunt): public feed returns HTTP 403 due to missing User-Agent header in urlopen()
Community Contributions Highlight:
Pull Requests:
- fix(crowdstrike-recon): connector gets permanently stuck after a PAGINATION_LIMIT_EXCEEDED error from query_notifications (#7190) by @romain-filigran in #7210
- fix(api_client): handle response errors and clean up request parameters (#7294) by @nnguyen-1 in #7295
- fix(shodan-internetdb): run() should register process_message, not _process_message (#6780) by @romain-filigran in #7304
- fix(microsoft-defender-intel): URL-encode OData $filter so URL indicators with query params sync (#7272) by @romain-filigran in #7273
- fix(cve): NVD 404 error and duplicate connector logs hide the real 'Invalid apiKey' cause (#7229) by @romain-filigran in #7230
- chore(google-ti-feeds): bump
aiohttpandcryptographyversion by @Powlinett in #7193 - fix(tenable): pin restfly version to fix failing tests due to outdated package (#7320) by @jabesq in #7321
- feat(assetnote-import): create the connector (#7141) by @maximus-debski in #7140
- chore(deps): update dependency google-auth to v2.56.3 by @renovate[bot] in #7115
- fix(assetnote-import): remove unsupported course of action option (#7141) by @jabesq in #7327
- feat(decoupling): Send manifest fragment (#7119) by @helene-nguyen in #7132
- feat(ci): Truncate short description at 250 chars on release connector (#7131) by @helene-nguyen in #7303
- feat(import-ttps-file-navigator): migrate connector to manager-supported mode (#7215) by @jabesq in #7315
- fix(infoblox-threat-defense): make CSP endpoint URL configurable (#7325) by @maximerafaillac in #7326
- refactor(phishunt): use single open feed endpoint and fix related bugs (#6198) by @maximerafaillac in #6774
- feat(import-document): migrate to manager-supported mode (#7219) by @helene-nguyen in #7317
- feat(import-file-yara): migrate connector to manager-supported mode (#7216) by @jabesq in #7314
- feat(import-file-misp): migrate connector to manager-supported mode (#7217) by @jabesq in #7313
- feat(import-external-reference): migrate connector to manager-supported mode (#7255) by @jabesq in #7311
- fix(infoblox): 'HttpUrl' object has no attribute 'rstrip' (#7359) by @SAY-5 in #7362
- chore(intel471_v2):bump verity471[stix] to 1.1.12 by @siedleckimichal in #7165
- fix(import-document): reinstate CONNECTOR_ONLY_CONTEXTUAL setting (#7219) by @jabesq in #7363
New Contributors:
- @siedleckimichal made their first contribution in #7165
Full Changelog: 7.260817.0...7.260824.0