github OpenCTI-Platform/opencti 5.7.0
Version 5.7.0
on GitHub

latest releases: 6.3.11, 6.3.10, 6.3.9...
19 months ago

Dear community, we're so glad to announce that OpenCTI 5.7.0 has been released 👏! This new version brings major features to the platform and fixes several bugs 🛸. This milestone also contains important code refactors and underlying enhancements which will allow us to speed-up the delivery of our 2023 strategic roadmap 🚀!

First of all, the RBAC has been reworked to be more adapted to organization composed of users and groups ✍🏻. Roles / marking definitions are now associated to groups so SSO / active directory integrations are now straightforward 🛡️. Also, we are progressively rolling out more capabilities to customize roles with default hidden entities, default dashboards, etc. to address several levels of stakeholders within an organization 🪄.

Also, it is now possible to fully customize confidence scale (colors, labels, min/max, ticks, etc.) by entity type like we did for mandatory attributes in the previous release. This work has triggered so many bugfixes and enhancements on forms and entities display 🌈.

Finally, opinions are now subject to the new capability "Access to collaborative creation" as notes, to allow read-only users to give their opinions and put comments in entities and relationships. Dashboard widgets start to be more interactive and you can click on horizontal bars and case management is now ready for takeoff with tasks / tasks template and requests for information scheduled for the next release 🎆.

📰 Please be sure to read the documentation about the RBAC refactoring to understand what changed and how you should adapt your SSO mappings. Basically, if you are using "roles_mapping", just replace "roles" with "groups". Whether you are using roles or groups on your SSO side, everything should now be mapped to OpenCTI groups.

Enhancements:

  • #3175 Be able to use assignees in dashboards and implement distribution list
  • #3136 "Top Labels" text overflows on small screens
  • #3117 In malware, make 2 fields "upsertable"
  • #3114 Merging hashes in the analyst workbench
  • #3098 Improve engine to handle large amount of text to search
  • #3095 Enforce merging to update elements base on their current index
  • #3088 Add case container management in Workbench
  • #3081 Dependabots fix and user edit api protection
  • #3064 Add indicator objectContains filtering capability + align contains filtering
  • #3012 Modularization of relation refs
  • #2994 Report -> Observables page mislabels Author/Creator
  • #2990 Improve Synchronizer client to try reconnect if started but connection is closed (404, ..)
  • #2977 Separate Case and Feedback, and implement Request for Information
  • #2872 Disable list export when more than X elements are targeted (static parameter with default value 50,000)
  • #2849 User overview modification
  • #2847 On horizontal bars chart representing an entity, be able to click on the bar to go on the entity
  • #2555 Customizable confidence scale
  • #2516 Align opinions behaviour on notes
  • #2512 Refactor RBAC / seggregation to put everything under the "group"
  • #2419 Automatically create groups on SSO

Bug Fixes:

  • #3148 Modifying Valid Until Date
  • #3147 Pie chart displaying IDs instead of names for attribute created-by.internal_id
  • #3143 Rules are not displayed anymore in rule engine settings (Demo)
  • #3138 Confidence scale setting input not behaves correctly
  • #3135 Don't show sub-narratives twice in Techniques->Narratives view
  • #3125 Modify the mechanism on created nested relationship in Graph
  • #3110 Unknown ObservedData in several display contexts
  • #3106 Creation of entities sometimes doesnt close the panel due to localstorage "types" element
  • #3103 Live stream / taxii collection query indices resolve too much information
  • #3102 contain_refs not authorized between files and other observable
  • #3101 Unable to create dashboard using Revoke filter
  • #3091 Channel creation with channel type is broken
  • #3090 Observable type User Agent cannot be sent through data sharing stream
  • #3084 Unknown channel value in Knowledge>Details
  • #3079 Unknown names in Overview>Latest relationships
  • #3077 Link entity from a located-at relationship creation form
  • #3070 Create entity from a located-at relationship creation form
  • #3069 Observables upserts don't appear in streams with label filters
  • #3067 Ref creation on observable can fail because of representative extraction
  • #3066 Extract referer can fail if malformed + user token must not be logged
  • #3060 'No label' filtering combination
  • #3059 Author negative filtering not working on streams
  • #3047 Report name is Unknown when creating a relationship between an object and a report
  • #3044 Entities distribution graph display in Groupings
  • #3033 Can't update end date of an event
  • #3031 Cannot share observables/artifacts/indicators with Organizations
  • #3029 You shouldn't be able to merge vocab when builtin
  • #3011 Multiple errors in logs: This attribute key first_seen is not allowed on the type targets
  • #3037 [MITRE] Mitre connector fails to create "The MITRE Corporation" entity with default connector permissions
  • #2985 Settings routes are not protected consistently with APIs
  • #2623 Synchronizer Stream Restarting on Error

Pull Requests:

New Contributors:

Full Changelog: 5.6.2...5.7.0

Check out latest releases or
releases around OpenCTI-Platform/opencti 5.7.0

Don't miss a new opencti release

NewReleases is sending notifications on new releases.

Get notifications