Dear community, we are so proud to announce the release of OpenCTI 3.2.0! This is a major version introducing more than 16 new features. As you can see on the demonstration instance, we refreshed the whole user interface for a better experience. We introduced analysis notes and comments for all objects (including relations), using the corresponding STIX 2.1 entity. Also, you are now able to filter all lists of entities with much more options (for instance the last 24 hours observables/indicators).
But one of the most interesting feature is creation of the knowledge history, which is available in all screens so you can understand what's going on on entities and relations. Using dedicated tokens for your connectors, you will see modifications and new relations. This history is logged in STIX 2 so it will be used for future implementation of platforms synchronization (including other TIPs).
As written in the documentation, we encourage OpenCTI administrators to use dedicated tokens for each connector of the platform to ensure consistent history.
Last but not least, code coverage of the API is now at 84% and almost all critical methods are covered. We would like to thank all community members and developers who were involved in this new release. More to come! Especially documentation on the data model :)
Enhancements:
- #647 Global enhancement of the user interface
- #633 Introduce functional logs / comments
- #627 Enforce versions in the worker requirements.txt
- #622 Ability to export indicators based on additional filters
- #600 Full test coverage of files in the directory database
- #596 [api] Allow filtering indicators by name
- #566 Reports : "imported by XYZ"
- #559 List and export with date filters everywhere
- #479 Improve filtering / sorting of reports
- #474 Introduce technical logs
- #431 OpenCTI class diagram/blueprints
- #406 Automating the OpenCTI Manual Install Process
- #340 Reports & Organizations (authors)
- #265 Organization display mode should be a user choice
- #264 Manual filters and tags display enhancement
- #239 Multiple authors for reports
- #172 Implement list filtering on some fields
- #56 Syntax validation of observables