Bug Fixes:
- #8320 fix(ransomlook): test_collect_builds_expected_graph calls the live RansomLook API
- #8202 fix(stairwell): enrichment creates observables for non-routable IPs and file names
- #8201 fix(cybersixgill): AttributeError on mid-loop state update in darkfeed importer
- #8169 fix(montysecurity-c2-tracker): source data removed upstream, connector imports nothing while reporting success
- #8159 fix(flashpoint): malware description "N/A" overwrites the description of existing malware
- #7955 fix(polyswarm-sandbox): TLP check raises on every marked artifact
Community Contributions Highlight:
- fix(stairwell): only relate routable IPs and real host names (#8202) by @zachdaniel-SW in #8203
- fix(polyswarm-sandbox): pass a TLP name to check_max_tlp (#7955) by @erickingleby-polyswarm in #8243
Pull Requests:
- feat(urlhaus): cache threat lookups that return no entity (#8156) by @romain-filigran in #8157
- fix(montysecurity-c2-tracker): fail the run when the source cannot be read (#8169) by @SamuelHassine in #8245
- fix(flashpoint): drop the "N/A" malware description placeholder (#8159) by @SamuelHassine in #8175
- fix(cybersixgill): parse the modified timestamp at the mid-loop checkpoint (#8201) by @yuminn-k in #8288
- fix(polyswarm-sandbox): pass a TLP name to check_max_tlp (#7955) by @erickingleby-polyswarm in #8243
- fix(stairwell): only relate routable IPs and real host names (#8202) by @zachdaniel-SW in #8203
- fix(ransomlook): mock the claim detail call in the collect graph test (#8320) by @throuxel in #8321
New Contributors:
Full Changelog: 7.261106.0...7.261109.0