🌟 OpenCTI v5.10.0 Release Notes 🌟
🚀 Enhancements: The Filigran team is proud to bring you another packed release! For organizations, v5.10.0 introduces a host of features designed to streamline your experience:
- Account Security - We're bolstering your defenses with account status and lockout functionality based on expiration dates (#4165).
- Improved UI - We’ve revamped several views, including a quick filter in the indicators view (#4007) and the ability to select objects directly in the Report's Correlation View (#4065).
- Integration & Customization - To enhance integration capabilities, we've added a built-in RSS client (#2864) and webhooks in the notification manager (#2850). Plus, we've made it easier than ever to customize your emails (#1871) and confidence scales (#2362).
- And many more...
🐛 Key Bug Fixes: Our developers have also been hard at work squashing those pesky bugs:
- A series of errors have been addressed, such as the alias field mishaps (#4162) and certain issues with the malware global kill chain (#4155).
- For the techie ones, we've fixed the dashboard widgets, especially those counting Sightings (#4088) and several export-related bugs (#4098, #3935).
- Moreover, you’ll find enhanced stability with corrections on system crashes (#4153, #4079) and improved handling during upgrades (#4038).
💬 Wrap-up: This release is a culmination of feedback, dedication, and the persistent effort by the Filigran team. Every enhancement and fix is geared towards making OpenCTI a more powerful and user-friendly platform. Remember, while we've highlighted only a few, many more fixes and tweaks are included in this version to optimize your experience.
🙌 A massive thank you to our user community for your continued support and feedback. Keep those suggestions coming, and let's together make OpenCTI even better!
Enhancements:
- #4165 Adds account status and lockout functionality by expire date
- #4089 SAML debug - Add "SkipRequestCompression" option
- #4065 Ability to select objects in the Report's Correlation View
- #4007 In the new indicators view, pattern type should be a "quick filter" (remove "detection")
- #3642 Be able to fully hide "Observations" (missing: Observables / Artifacts) and "Events" (missing: Sightings)
- #3544 Move hidden entities from roles to groups and implement hidden entities at organization level
- #3506 Enable notifications mass deletion for all roles
- #2955 Be able to turn a report to an investigation or an analyst workbench
- #2864 Built-in RSS client to consume data
- #2850 Implement webhooks in the notification manager
- #2559 Display all indicators/observables contained in reports which contain a specific entity
- #2540 Be able to add images in overview of some entity types
- #2362 Consider adding a custom confidence scale for sources and contents
- #1871 Possibility to customize email sent by the subscription functionality
Bug Fixes:
- #4162 'alias' field not working well for System, Sector and Individual
- #4157 Can't create some relationships from Narrative Knowledge
- #4155 Malware global kill chain doesn't display correct info
- #4153 Creating a note on observed data crashes the website
- #4133 Can't update relationship stop_time
- #4099 Missing icon for Threat Actors in Workbench
- #4098 Can't export Threat Actors list
- #4095 Error when accessing Intrusion sets on a specific platform (missing data)
- #4092 No relationship type available when creating a relationship from an Area
- #4088 [Dashboards] Widget for counting Sightings not showing the correct count
- #4087 Removing Sharing Organization removes relationships
- #4086 Sighting details are empty in investigation graphs
- #4085 PDF viewer broken
- #4079 Background task crash
- #4078 The "deleteConnector" API runs into an unexpected exception when the connector doesn't exist
- #4071 Background task for negative filter is not correctly computed
- #4063 Author's field being deleted after organizations merge
- #4041 Dashboard widgets do not display Narrative names properly
- #4038 Error during upgrade from 5.8.7 to 5.9.x
- #4035 Error at external reference creation with a file
- #4020 Ingestion page is broken
- #4018 Grouping > Knowledge > Correlation view is broken
- #4012 In the history of a sector, the relationship historic is not correct
- #4009 In knowledge > indicators, select n things, try to export
- #4008 Top menu in cases is loading while other menus are not
- #4006 Victimology button "relationship view" is broken
- #4005 Toolbar in new indicators view does not have the correct padding
- #4004 SAML Organizations not mapped to OpenCTI organizations
- #3992 Error upon creation of "media-content" or "network-traffic" type observable
- #3986 In investigation graph, when selecting a marking or label, displaying a not found error
- #3938 SAML Groups not mapped to OpenCTI Groups
- #3935 Error when trying to export attack patterns filtered by Kill Chain phase
- #3934 Bug when trying to add Observables in content mapping
- #3930 Massive search broken since containersNumber
- #3929 Important issue when udating an open vocab with alias
- #3928 Not possible to update primary motivation of a threat actor
- #3925 Dashboard widgets do not display Narrative names properly
- #3924 Border style table doesn't work.
- #3922 Possible to lockout workspaces (dashboards / investigation) in a case
- #3921 Regression on default values when creating entities in the context of a container
- #3919 Users without "bypass all capabilities" are unable to remove TLP markings from reports
- #3917 Editing SHA512 of File
- #3915 Export of Knowledge in Relationship view generates an error
- #3909 Updater store bug on stix cyber observable
- #3898 Is not possible to add a status for a Threat Actor Individual
- #3897 Status filter is not scoped by entity
- #3896 Sometime, the customization tab under settings takes a long time to appear
- #3887 Observable data field copied to wrong Indicator field (concerning Email message)
- #3884 Sync Ingestion Error
- #3882 If the number of search results is large, they are not displayed on the screen.
- #3866 Problem with an enrichment connector
- #3865 Crash during creation of links between an Infrastructure and IPv4 addresses
- #3854 Entering / exiting home dashboard is triggering a full render of the top bar
- #3848 Elasticsearch ApiKey authentication not working
- #3845 When adding a malware analysis via Analysis or Cases/Entities, name is not displayed in the search result
- #3844 Dashboard crashes
- #3533 Activity graph takes some time to fit the paper in overview of user
Pull Requests:
- Update dependency express-rate-limit to v6.8.0 by @renovate in #3812
- Update dependency @opensearch-project/opensearch to v2.3.1 by @renovate in #3814
- Update dependency @vitejs/plugin-react to v4.0.3 by @renovate in #3817
- Update dependency @types/react-relay to v14.1.4 by @renovate in #3816
- Update dependency @xmldom/xmldom to v0.8.10 by @renovate in #3818
- Update dependency cross-fetch to v3.1.8 by @renovate in #3823
- Update dependency @types/node to v20.4.4 by @renovate in #3822
- Update dependency esbuild to v0.18.16 by @renovate in #3824
- Update dependency fast-glob to v3.3.1 by @renovate in #3825
- Update dependency react-apexcharts to v1.4.1 by @renovate in #3831
- Update dependency nodemailer to v6.9.4 by @renovate in #3829
- Update dependency postcss to v8.4.27 by @renovate in #3830
- Update dependency @date-io/date-fns to v2.17.0 by @renovate in #3828
- Update dependency react-router-dom-v5-compat to v6.14.2 by @renovate in #3834
- Update dependency ts-loader to v9.4.4 by @renovate in #3835
- Update react monorepo by @renovate in #3836
- [frontend] Close dialog on create/update opinion by @RomuDeuxfois in #3839
- [backend/frontend] Be able to add images in overview of some entity types (#issue/2540) by @SarahBocognano in #3797
- [frontend] fix Malware analyses names in Cases/Analyses "Entities" view by @yassine-ouaamou in #3847
- Update dependency @ckeditor/ckeditor5-dev-utils to v38.1.3 by @renovate in #3858
- Update dependency eslint-config-prettier to v8.9.0 by @renovate in #3851
- Update aws-sdk-js-v3 monorepo to v3.379.1 by @renovate in #3855
- Update dependency @elastic/elasticsearch to v8.9.0 by @renovate in #3850
- Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.9.0 by @renovate in #3853
- Update dependency @ckeditor/ckeditor5-dev-translations to v38.1.3 by @renovate in #3857
- Update docker.elastic.co/kibana/kibana Docker tag to v8.9.0 by @renovate in #3856
- Update dependency express-rate-limit to v6.8.1 by @renovate in #3873
- Update dependency @mui/material to v5.14.2 by @renovate in #3871
- Update dependency eslint to v8.46.0 by @renovate in #3870
- Update dependency node-fetch to v3.3.2 by @renovate in #3874
- Update opentelemetry-js monorepo by @renovate in #3875
- Update dependency helmet to v7 by @renovate in #3877
- Update dependency esbuild to v0.18.17 by @renovate in #3872
- [backend] fix missing definition for stix cyber observables relationships (#3865) by @SouadHadjiat in #3885
- Update dependency eslint-plugin-import to v2.28.0 by @renovate in #3852
- Update dependency react-relay-network-modern to v6.2.2 by @renovate in #3833
- [frontend] fix global search infinite loading and total count (#3882) by @SouadHadjiat in #3883
- Update dependency yup to v1 by @renovate in #3658
- [frontend] Fix full re-render of the top bar when entering / exiting home dashboard (#3854) by @marieflorescontact in #3886
- [backend] Fix indicator creation from email message by @RomuDeuxfois in #3890
- [backend/frontend] Use admiralty scale for reliability and confidence (#2362) by @SouadHadjiat in #3719
- Issue/2559 Display all indicators/observables contained in reports which contain a specific entity(#2559) by @marieflorescontact in #3764
- [frontend] Fix Status add in ThreatActorIndividualEditionOverview (#3898) by @marieflorescontact in #3899
- [frontend] Fix Status filtered by entityType(#3897) by @marieflorescontact in #3908
- Update dependency react-otp-input to v3 by @renovate in #3704
- Update vitest monorepo to v0.34.1 by @renovate in #3813
- Update dependency eslint-config-prettier to v8.10.0 by @renovate in #3911
- [backend] fix export of Knowledge in Relationship view (#3915) by @Archidoit in #3916
- Update dependency parsuricata to v0.4.1 by @renovate in #3912
- Update aws-sdk-js-v3 monorepo by @renovate in #3910
- [frontend] fix some fields update in Threat Actor Details (#3928) by @Archidoit in #3931
- [frontend] Fix default confidence by @RomuDeuxfois in #3932
- [backend] Fix export attack patterns filtered by Kill Chain phase (#3935) by @SouadHadjiat in #3937
- [Backend] Fix on secondary motivations vocab bug by @Kedae in #3933
- Update dependency @ckeditor/ckeditor5-dev-translations to v38.2.1 by @renovate in #3940
- Update aws-sdk-js-v3 monorepo to v3.385.0 by @renovate in #3939
- Update dependency @ckeditor/ckeditor5-alignment to v39 by @renovate in #3942
- Update dependency validator to v13.11.0 by @renovate in #3943
- Update dependency @ckeditor/ckeditor5-block-quote to v39 by @renovate in #3956
- Update dependency @ckeditor/ckeditor5-editor-classic to v39 by @renovate in #3958
- Update dependency @ckeditor/ckeditor5-font to v39 by @renovate in #3960
- Update dependency @ckeditor/ckeditor5-special-characters to v39 by @renovate in #3974
- Update dependency @ckeditor/ckeditor5-link to v39 by @renovate in #3966
- Update dependency @ckeditor/ckeditor5-media-embed to v39 by @renovate in #3968
- Update dependency @ckeditor/ckeditor5-theme-lark to v39 by @renovate in #3976
- Update dependency @ckeditor/ckeditor5-dev-utils to v38.2.1 by @renovate in #3941
- Update dependency formik to v2.4.3 by @renovate in #3950
- Update dependency @ckeditor/ckeditor5-autoformat to v39 by @renovate in #3954
- Update dependency @ckeditor/ckeditor5-paste-from-office to v39 by @renovate in #3971
- Update dependency @ckeditor/ckeditor5-heading to v39 by @renovate in #3961
- Update dependency @ckeditor/ckeditor5-basic-styles to v39 by @renovate in #3955
- Update dependency @ckeditor/ckeditor5-code-block to v39 by @renovate in #3957
- Update dependency @ckeditor/ckeditor5-essentials to v39 by @renovate in #3959
- Update dependency @ckeditor/ckeditor5-remove-format to v39 by @renovate in #3972
- Update dependency @ckeditor/ckeditor5-paragraph to v39 by @renovate in #3970
- Update dependency @ckeditor/ckeditor5-list to v39 by @renovate in #3967
- Update dependency @ckeditor/ckeditor5-horizontal-line to v39 by @renovate in #3963
- Update dependency @ckeditor/ckeditor5-upload to v39 by @renovate in #3977
- Update dependency @ckeditor/ckeditor5-mention to v39 by @renovate in #3969
- Update dependency @ckeditor/ckeditor5-table to v39 by @renovate in #3975
- Update dependency @ckeditor/ckeditor5-source-editing to v39 by @renovate in #3973
- Update dependency @ckeditor/ckeditor5-indent to v39 by @renovate in #3965
- Update dependency @ckeditor/ckeditor5-highlight to v39 by @renovate in #3962
- Update dependency @types/node to v20.4.7 by @renovate in #3944
- [frontend] Fix border style on markdown by @RomuDeuxfois in #3936
- Update dependency @types/react to v18.2.18 by @renovate in #3945
- Update dependency apexcharts to v3.41.1 by @renovate in #3947
- Update dependency eql to v0.9.17 by @renovate in #3948
- Update dependency tap to v16.3.8 by @renovate in #3951
- Update actions/checkout action to v3 by @renovate in #3953
- Update dependency eslint-plugin-react to v7.33.1 by @renovate in #3949
- Update dependency @escape.tech/graphql-armor to v2 by @renovate in #3978
- Update dependency canonicalize to v2 by @renovate in #3980
- Update material-ui monorepo by @renovate in #3952
- Update dependency @ckeditor/ckeditor5-image to v39 by @renovate in #3964
- Update dependency @vitejs/plugin-react to v4.0.4 by @renovate in #3946
- Update dependency cross-fetch to v4 by @renovate in #3982
- Update dependency eslint-plugin-prettier to v5 by @renovate in #3984
- Update dependency css-loader to v6 by @renovate in #3983
- Update graphql-tools monorepo to v10 (major) by @renovate in #3987
- Update typescript-eslint monorepo to v6 (major) by @renovate in #3989
- Update graphqlcodegenerator monorepo (major) by @renovate in #3988
- [backend/frontend] Display of indicators and observables second part by @RomuDeuxfois in #3900
- [backend/frontend] Improve performance for entity types menu by @RomuDeuxfois in #3993
- [frontend/backend] Enable notifications mass deletion for all users (#3506) by @Archidoit in #3913
- [frontend] Fix padding in indicators view (knowledge) toolbar by @RomuDeuxfois in #4016
- [front] Fix on Indicator creation in observables by @Kedae in #4000
- [backend] network-traffic dates type fix (#3992) by @Archidoit in #4021
- [backend] change timestamp from 23rd of august to 7th by @yassine-ouaamou in #4022
- [backend] Fix merge stix files with hybrid analysis connector (#3866) by @yassine-ouaamou in #3918
- [frontend] Fix Victimology display views by @RomuDeuxfois in #4017
- [backend] SAML groups mapping fix (#3938) by @Archidoit in #4015
- [backend] organization mapping: support paths that are not arrays (#4004) by @Archidoit in #4025
- [frontend] fix correlation view of Grouping Knowledge tab (#4018) by @Archidoit in #4019
- [backend] Workspace should have at least one valid admin (#3922) by @Archidoit in #4014
- Update dependency @ckeditor/ckeditor5-dev-translations to v38.3.1 by @renovate in #4029
- Update aws-sdk-js-v3 monorepo to v3.388.0 by @renovate in #4028
- Add missing property on initCreateEntitySettings by @RomuDeuxfois in #4033
- Update dependency @ckeditor/ckeditor5-dev-utils to v38.3.1 by @renovate in #4030
- Update dependency express-rate-limit to v6.9.0 by @renovate in #4032
- [backend] workspaces authorizedMembers complements (#3922) by @Archidoit in #4037
- Update dependency migrate to v2 by @renovate in #3985
- [frontend] Fix loading on top menu cases by @RomuDeuxfois in #4034
- [frontend] fix external reference creation with a file (#4035) by @Archidoit in #4036
- Update dependency esbuild to v0.19.0 by @renovate in #4031
- Update opentelemetry-js monorepo by @renovate in #4047
- Update dependency @graphql-tools/utils to v10.0.5 by @renovate in #4048
- Update dependency @types/node to v20.4.9 by @renovate in #4049
- Update dependency @types/react to v18.2.20 by @renovate in #4050
- Update dependency recharts to v2.7.3 by @renovate in #4051
- Update material-ui monorepo by @renovate in #4052
- Update typescript-eslint monorepo to v6.3.0 by @renovate in #4046
- Update dependency prettier to v3 by @renovate in #4054
- Update dependency eslint-config-prettier to v9 by @renovate in #4057
- Update dependency graphql-constraint-directive to v5.2.0 by @renovate in #4044
- Update dependency react-router-dom-v5-compat to v6.15.0 by @renovate in #4045
- Update dependency terser-webpack-plugin to v5 by @renovate in #4059
- [backend/frontend] Be able to hide Observables, Artifacts and Sightings (#3642) by @yassine-ouaamou in #3889
- Update dependency webpack-cli to v5 by @renovate in #4061
- Update dependency react-pdf to v7 by @renovate in #4055
- Update dependency style-loader to v3 by @renovate in #4056
- Update dependency node-sass to v9 by @renovate in #4058
- Update dependency postcss-loader to v7 by @renovate in #4053
- Update dependency eslint to v8.47.0 by @renovate in #4066
- Update dependency @types/node to v20.4.10 by @renovate in #4067
- Update dependency esbuild to v0.19.1 by @renovate in #4068
- [Backend] Improve merging to support mono ref relationships (#4063) by @richard-julien in #4070
- [backend/frontend] Add Outcome connector handling and introduce Webhooks by @Kedae in #3707
- [backend/frontend] Fix ingestion creation (#4020) by @SouadHadjiat in #4042
- [frontend] Stix Meta Object details in Investigation graphs (#3986) by @Archidoit in #4003
- [frontend] retro compatibility for entities relations histories (#4012) by @Archidoit in #4072
- [frontend] Handle null scope on task by @RomuDeuxfois in #4080
- [frontend] update objective confidence scale template (#2362) by @SouadHadjiat in #4074
- [backend] handle deletion of a non-existing connector (#4078) by @Archidoit in #4082
- Update aws-sdk-js-v3 monorepo to v3.391.0 by @renovate in #4102
- Update dependency @ckeditor/ckeditor5-dev-translations to v38.4.0 by @renovate in #4103
- Update dependency graphql to v16.8.0 by @renovate in #4106
- Update redis Docker tag to v7.2.0 by @renovate in #4107
- Update dependency @ckeditor/ckeditor5-dev-utils to v38.4.0 by @renovate in #4104
- Update rjsf monorepo to v5.12.1 by @renovate in #4108
- Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.9.1 by @renovate in #4111
- Update docker.elastic.co/kibana/kibana Docker tag to v8.9.1 by @renovate in #4112
- Update aws-sdk-js-v3 monorepo to v3.395.0 by @renovate in #4114
- Update dependency eslint-plugin-react to v7.33.2 by @renovate in #4116
- Update dependency prettier to v3.0.2 by @renovate in #4119
- Update dependency html-to-pdfmake to v2.4.23 by @renovate in #4117
- Update dependency esbuild to v0.19.2 by @renovate in #4115
- Update vitest monorepo to v0.34.2 by @renovate in #4120
- Update material-ui monorepo by @renovate in #4113
- Update Yarn to v3.6.2 by @renovate in #4110
- Update dependency unified to v11 by @renovate in #4122
- Update dependency react-cookie to v5 by @renovate in #4121
- Update typescript-eslint monorepo to v6.4.0 by @renovate in #4109
- Update dependency postcss to v8.4.28 by @renovate in #4118
- Update dependency eslint-plugin-import to v2.28.1 by @renovate in #4123
- Update dependency @types/node to v20.5.1 by @renovate in #4105
- [backend/frontend] Add native / built-in RSS feeds and TAXII collections ingestion by @SamuelHassine in #4097
- [backend] Add engine_selector option to support elk specific auth strategy (#3848) by @richard-julien in #4023
- [backend/frontend] Hidden entity types in groups and organizations (#3544) by @RomuDeuxfois in #4039
- [frontend] Minor design fix by @Archidoit in #4129
- [frontend] Add Threat-Actor icon by @RomuDeuxfois in #4128
- [frontend] Knowledge graphs improvement + sightings details in investigation graphs (#4086) by @Archidoit in #4091
- [integration] CI Revolution by @SamuelHassine in #4135
- [backend] fix backgroundTask filter issue by @yassine-ouaamou in #4137
- [frontend] fix relationship stop_time edition (#4133) by @Archidoit in #4134
- [frontend] refactor cards components (#4095) by @SouadHadjiat in #4101
- [frontend] Entity details in correlation views (#4065) by @Archidoit in #4096
- [backend/frontend] Fix creation and edition of SHA512 in File Observable (#issue/3917) by @SarahBocognano in #4100
- [backend/frontend] Fix knowledge graph dashboard widgets with STIX relationships (#4088) by @SamuelHassine in #4139
- [backend/frontend] Fix available relationships for Administrative-Area by @RomuDeuxfois in #4094
- Update aws-sdk-js-v3 monorepo to v3.397.0 by @renovate in #4144
- Update dependency @types/react to v18.2.21 by @renovate in #4146
- Update dependency @types/react-relay to v14.1.5 by @renovate in #4147
- Update dependency html-to-pdfmake to v2.4.24 by @renovate in #4148
- Update dependency unified to v11.0.2 by @renovate in #4149
- Update typescript-eslint monorepo to v6.4.1 by @renovate in #4150
- Update dependency jsondiffpatch to v0.5.0 by @renovate in #4145
- Update dependency react-cookie to v6 by @renovate in #4151
- [backend/frontend] improve relationships distribution query (#3844) by @SouadHadjiat in #3996
- [backend] Improve stix loader and stream relation resolution by @richard-julien in #4154
- [frontend] global kill chain phase display adaptation (#4155) by @Archidoit in #4158
- [backend] Improve objects resolutions for container (#4153) by @richard-julien in #4159
- [frontend] Removed unused knowledge entries by @RomuDeuxfois in #4161
- [frontend] Fix alias and viewAs for System, Individual and Sector (#4162) by @Archidoit in #4163
- [frontend/backend] start investigation from report, groupings, incident responses, rfis & rfts by @tommychat in #4064
- [frontend/backend] Adds account status and lockout functionality by expire date by @ParamConstructor in #3303
- [frontend] Fix the creation of relations by @SamuelHassine in #4166
- [backend/frontend] Be able to add images in overview of some entity types (#issue/2540) by @SarahBocognano in #3998
- Update aws-sdk-js-v3 monorepo by @renovate in #4167
- Update dependency apexcharts to v3.42.0 by @renovate in #4168
- Update dependency recharts to v2.8.0 by @renovate in #4170
- Update Yarn to v3.6.3 by @renovate in #4171
- Update dependency eslint to v8.48.0 by @renovate in #4169
- Update dependency html-to-pdfmake to v2.4.25 by @renovate in #4172
- Update material-ui monorepo by @renovate in #4173
- Update vitest monorepo to v0.34.3 by @renovate in #4174
Full Changelog: 5.9.6...5.10.0