Enhancements:
- #7800 [FEEDLY] add stacktrace to error logs
- #7749 feat(intel471_v2): add Verity471 watcher alerts stream
- #7740 feat(lamis-network): internal-enrichment connector for IP intelligence & fraud scoring
- #7651 feat(datadog): migrate connector to the catalog
- #7189 feat(email-intel-microsoft): Allow configuration of report type
Bug Fixes:
- #7781 fix(import-document-ai): refang defanged observables before sending the bundle to OpenCTI
- #7296 fix(connector-name): RF Notes Connector – Notes with only "Vulnerability Intelligence" topic (wJv-Gk) not ingested when topic is present in RECORDED_FUTURE_TOPIC
- #7118 fix(recorded-future): map Recorded Future "AKA" alias data to the STIX
aliasesproperty on Threat Actor / Intrusion Set creation - #7084 fix(thehive): THEHIVE_CASE_STATUS_MAPPING never applies because the connector reads extendedStatus, which TheHive 5 does not return
- #6797 fix(connector-cve): rate-limiter window resets at each historical-backfill chunk boundary
- #6345 fix(import-document): some logs are not formatted as JSON
Pull Requests:
- docs(group-ib): update README verification status to Partner (#7769) by @jabesq in #7770
- feat(lamis-network): add internal-enrichment connector for IP intelligence & fraud scoring (#7740) by @VitaliGrecciani in #7748
- docs(contributing-guide): add prefilled documentation issue link (#7647) by @throuxel in #7789
- fix(recorded-future): map recorded future aka alias data to stix aliases (#7118) by @throuxel in #7713
- fix(connector-cve): keep rate-limiter window continuous across backfill chunks (#6797) by @MohammadYusif in #6798
- fix(import-document): route parsing errors through connector_logger (#6345) by @aguspatur22 in #7524
- feat(email-intel-microsoft): allow configuration of report type (#7189) by @throuxel in #7719
- fix(import-document-ai): refang defanged observables (#7781) by @SamuelHassine in #7782
- feat(intel471_v2): add Verity471 watcher alerts stream (#7749) by @mmolenda in #7755
- fix(thehive): read case status from status field instead of extendedStatus (#7084) by @throuxel in #7708
- fix(recorded-future): add vulnerability intelligence topic to default analyst notes topics (#7296) by @throuxel in #7718
- feat(feedly): add traceback to the error message (#7800) by @Mathieu4141 in #6449
- feat(datadog): migrate connector to manager-supported mode (#7651) by @jabesq in #7773
- chore(mise): centralize container runtime and clean up docker tasks (#7734) by @jabesq in #7735
- fix(recorded-future): skip analyst note event relations when adversary resolves to an identity (#7691) by @throuxel in #7692
- chore(deps): update dependency google-auth to v2.59.0 (master) by @renovate[bot] in #7810
- chore(deps): update dependency coverage to v7.16.2 (master) by @renovate[bot] in #7796
New Contributors:
- @VitaliGrecciani made their first contribution in #7748
- @MohammadYusif made their first contribution in #6798
- @aguspatur22 made their first contribution in #7524
Full Changelog: 7.260928.1...7.260930.0