Enhancements:
- #8020 feat(google-dtm): Add option to exclude plaintext passwords from Compromised Credentials alerts
- #8013 feat(intel471_v2): add Verity471 leaked credentials stream
- #6558 feat(connectors-sdk): add logging module
- #3039 feat(crowdstrike-incidents): create the connector
Bug Fixes:
- #8030 fix(mandiant): Indicators collection stuck in a retry loop: KeyError 'id' on an attributed association with no id
- #8021 fix(google-dtm): swapped service url/domain labels and empty file name in account discovery alerts
- #7883 fix(doppel): connector loses progress when a later alerts page fails
- #7788 fix(flashpoint): duplicate indicators created for logically-equivalent extracted_config records
- #7446 fix(first-epss): API errors are swallowed and cascade into an unhandled
NoneTypefailure
Community Contributions Highlight:
- fix(doppel): checkpoint alert sync after each page (#7883) by @andres-almada-doppel in #7884
- feat(google-dtm): add option to exclude plaintext passwords from Compromised Credentials alerts (#8020) by @lumineuse1 in #8026
- fix(google-dtm): swapped service url/domain labels and empty file name in account discovery alerts (#8021) by @lumineuse1 in #8027
- fix(mandiant): skip attributed association without an id (#8030) by @rahul05ranjan in #8031
Pull Requests:
- fix(doppel): checkpoint alert sync after each page (#7883) by @andres-almada-doppel in #7884
- fix(google-dtm): swapped service url/domain labels and empty file name in account discovery alerts (#8021) by @lumineuse1 in #8027
- feat(connectors-sdk)!: add a logger independent of OpenCTIConnectorHelper (#6558) by @Powlinett in #8005
- feat(google-dtm): add option to exclude plaintext passwords from Compromised Credentials alerts (#8020) by @lumineuse1 in #8026
- docs(stream): remove unused CONNECTOR_CONFIDENCE_LEVEL from stream connectors (#6594) by @augustin-filigran in #8015
- fix(first-epss): retry transient API errors and stop swallowing them (#7446) by @throuxel in #8011
- feat(intel471_v2): add Verity471 leaked credentials stream (#8013) by @mmolenda in #8017
- fix(mandiant): skip attributed association without an id (#8030) by @rahul05ranjan in #8031
- feat(flashpoint): convert extracted_config into malware, observables and note (#7788) by @jabesq in #7807
- feat(crowdstrike-incidents): import Next-Gen SIEM alerts as Incidents (#3039) by @maximerafaillac in #7946
New Contributors:
- @andres-almada-doppel made their first contribution in #7884
- @lumineuse1 made their first contribution in #8027
- @rahul05ranjan made their first contribution in #8031
Full Changelog: 7.261021.1...7.261023.0