Enhancements:
- #7927 [VulnCheck] ingest SSVC data from the VulnCheck NVD++ index
- #7911 feat(connectors-sdk): add connector max TLP setting for internal enrichment connectors and migrate existing connectors
- #7895 feat(ismalicious) migrate connector to the catalog
- #7892 feat(crtsh) migrate connector to the catalog
- #7678 feat(hunt-io): add support for hunt v3 c2 feed api
- #7674 feat (hatching-triage-support): support enrichment of connector Hatching triage sandbox using SCO's
- #7650 feat(cybersixgill): migrate connector to the catalog
- #7409 feat(Zetalytics): Add Zetalytics DNS enrichment connector
- #6916 feat(vulncheck): proxy support
- #5251 refactor(group-ib): migrate connector to be connector manager supported
Bug Fixes:
- #7949 fix(zetalytics): config schema generation fails
- #7922 fix(scanmalware-enrichment): verdict is taken from scans that only redirected to the observable
- #7093 fix(Recorded Future Enrichment): error on observable enrichment
- #6943 fix(recorded-future): threat actors listed in context_entities are missing from analyst note STIX bundle
Community Contributions Highlight:
- feat(vulncheck): use proxy from environment (#6916) by @Al33t in #6945
- fix(recorded-future): include context_entities so their threat actors aren't dropped (#6943) by @jabesq in #7706
- fix(scanmalware-enrichment): take the verdict only from a scan of the observable (#7922) by @jonaslejon in #7923
- feat(vulncheck): ingest SSVC data and label VulnCheck KEV vulnerabilities (#7927) by @maddawik in #7958
Pull Requests:
- feat(hunt-io): add support for hunt v3 api while keeping v2 (#7678) by @m4r35 in #7679
- fix: support pydantic 2.14 in connectors-sdk and proofpoint-tap tests (#7934) by @ncarenton in #7935
- fix(recordedfuture-enrichment): handle observables below the indicator threshold (#7093) by @ncarenton in #7930
- feat(hatching-triage-sandbox): support enrichment of connector Hatching triage sandbox using SCO's (#7674) by @pedropaton-tech in #7675
- chore(deps): pin pydantic to 2.14.0 in every connector (#7940) by @jabesq in #7941
- chore(deps): update dependency cairosvg to v2.9.1 [security] (master) by @renovate[bot] in #7942
- chore(deps): update dependency msgraph-sdk to v1.64.0 (master) by @renovate[bot] in #7925
- feat(ismalicious): migrate connector to manager-supported mode (#7895) by @jabesq in #7909
- feat(crtsh): migrate connector to manager-supported mode (#7892) by @jabesq in #7907
- feat(zetalytics): add DNS enrichment connector (#7409) by @FIying-Scotsman in #7410
- ci(tests): always post codecov statuses for PRs and merge queue (#7931) by @ncarenton in #7932
- fix(zetalytics): expose ConfigLoader through src/main.py for schema generation (#7949) by @jabesq in #7951
- refactor(group-ib-ti): Manager-supported migration and list blockers (#5251) by @jabesq in #7812
- fix(connectors): pass log metadata with meta= keyword (#6558) by @Powlinett in #7917
- chore(deps): update dependency dnspython to ~=2.9.0 (master) by @renovate[bot] in #7947
- refactor(states): add BaseConnectorState.to_json() (#6558) by @Powlinett in #7918
- chore(connectors)!: remove WorkManager from public API (#6558) by @Powlinett in #7919
- chore(deps): update dependency google-auth to v2.62.0 (master) by @renovate[bot] in #7924
- feat(connectors-sdk): add max_tlp to internal enrichment connector config (#7911) by @throuxel in #7926
- feat(cybersixgill): migrate connector to manager-supported mode (#7650) by @jabesq in #7902
- fix(scanmalware-enrichment): take the verdict only from a scan of the observable (#7922) by @jonaslejon in #7923
- feat(vulncheck): use proxy from environment (#6916) by @Al33t in #6945
- feat(vulncheck): ingest SSVC data and label VulnCheck KEV vulnerabilities (#7927) by @maddawik in #7958
- fix(recorded-future): include context_entities so their threat actors aren't dropped (#6943) by @jabesq in #7706
New Contributors:
- @pedropaton-tech made their first contribution in #7675
Full Changelog: 7.261008.0...7.261014.0