Dear community, OpenCTI 5.4.1 has been released 🎉! This new version fixes all known bugs affecting the platform especially the creation of indicators without kill chain phases, sightings screen and bulk enrichment of artifacts 🎊. OpenCTI 5.4.1 also contains some performance and export improvements ✨.
Enhancements:
- #2600 [front] Add sharing organization capability to indicator
- #2599 [back] Prevent organization sharing to be empty by an upsert
- #2596 Issue with valid_from field when creating indicator
- #2592 [back] Improve containerWithRefsBuilder for fastest rescan and live handling
- #2587 Inconstant use of "Indicator Type" terminology & Limited Indicator filtering ability
- #2580 [BUG][5.4.0] Custom SAML config options dont seem to be passed to passportjs
- #481 Export improvement. Use file to ask list of ids or queries
Bug Fixes:
- #2604 Bulk enrichment from artifacts doesn't use whole filter
- #2602 [front] Sighting screens keep reloading
- #2594 [BUG] Multiple Indicator Type Filters in live datastream
- #2593 [BUG] Cannot create indicator with KillChainPhases
- #2579 [BUG] OIDC reports invalid token from ADFS
- #2578 [BUG/FEATURE] 5.4.0 Upgrade Revoking Indicators w/o valid_until set on upgrade
Pull Requests:
- [back] Improve containerWithRefsBuilder for fastest rescan and live handling by @richard-julien in #2591
- [back] Enhance valid_from and valid_until indicator computation by @richard-julien in #2598
Full Changelog: 5.4.0...5.4.1