Version 6.2.14

Enhancements:

• #2481 [Sentinel] Need Update Readme
• #2460 Forcing Malpedia markings to Organisations requirements
• #1965 Create a splunk app

Bug Fixes:

• #2498 [Malpedia] default_marking recovery error
• #2492 [Mandiant] Handle multiple standard ID for a software when importing a report + fix state
• #1832 [virustotal-livehunt-notifications]

Pull Requests:

• Update requirements.txt for ransomwarelive by @sudesh0sudesh in #2483
• Update dependency boto3 to v1.34.162 by @renovate in #2480
• Update dependency google-api-python-client to v2.141.0 by @renovate in #2484
• [Sentinel] Update Documentation by @Megafredo in #2482
• [ZeroFox] Document collectors and add software observable to C2Domains collector by @DNRRomero in #2453
• Update cimg/python Docker tag to v3.12 by @renovate in #2485
• [Mandiant] Handle multiple standard ID for a software when importing a report + fix state when entity use epoch time by @helene-nguyen in #2493
• Update dependency google-api-core to v2.19.1 by @renovate in #2486
• Update dependency lxml to v5.3.0 by @renovate in #2487
• Update dependency requests to v2.32.3 by @renovate in #2489
• [virustotal] Enhance all notes by @SamuelHassine in #2496
• [REVERSINGLABS] New connector by @DinkoReversingLabs in #2478
• Update dependency google-auth to v2.34.0 by @renovate in #2501
• Update dependency boto3 to v1.35.0 by @renovate in #2500
• [Malpedia] Fix default_marking recovery error and update readme by @Megafredo in #2499
• Update dependency pycti to v6.2.13 by @renovate in #2504
• Update dependency simplejson to v3.19.3 by @renovate in #2505
• [VirusTotal Livehunt Notification] Fix issue on json dump by @helene-nguyen in #2503

Full Changelog: 6.2.13...6.2.14

Version 6.2.13

Bug Fixes:

• #2467 [Mandiant] Import a vulnerability report can create a lot of relationships between vulnerability and software
• #2449 [HarfangLab] Error : Failure observable created
• #2433 [VirusTotal] - Exception during IP address enrichment when VT does not return the expected information

Pull Requests:

• Update opencti/connector-fortinet-ti Docker tag to v6.2.12 by @renovate in #2464
• [VirusTotal] - Exception during IP address enrichment when VT does not return the expected information by @romain-filigran in #2434
• Update dependency boto3 to v1.34.158 by @renovate in #2463
• Update dependency nltk to v3.8.2 by @renovate in #2471
• [HarfangLab] Fix bug create observable by @Megafredo in #2450
• Update dependency dnstwist to v20240812 by @renovate in #2473
• [Mandiant] Create 2 new environment variables for creating CPE or not for software and limit number of relationships by @helene-nguyen in #2468

Full Changelog: 6.2.12...6.2.13

Version 6.2.12

Enhancements:

• #2429 [Fortinet TI] Creation of the Fortinet TI connector
• #2392 [Sekoia] Import "related threat" from Sekoia connector

Pull Requests:

• Update dependency boto3 to v1.34.152 by @renovate in #2441
• [Sekoia] Adding related threat by @Megafredo in #2416
• [ShadowServer] - Connector updates by @cmandich in #2446
• Fix Tagger Connector entity type comparison and safe attribute access" by @obideuce in #2445
• Update dependency boto3 to v1.34.153 by @renovate in #2447
• [Connectors] Integrate Pydantic V2 Compatibility Changes by @Megafredo in #2444
• Update dependency wheel to v0.44.0 by @renovate in #2448
• New Fortinet connector by @Lhorus6 in #2442
• Update README Fortinet by @Lhorus6 in #2455
• Update dependency boto3 to v1.34.154 by @renovate in #2452
• Update dependency pycti to v6.2.11 by @renovate in #2451
• [Comlaude] Fix Identity import by @yassine-ouaamou in #2454
• [Comlaude] Tiny fix for labels by @Lhorus6 in #2457
• Update dependency google-api-python-client to v2.140.0 by @renovate in #2458
• Update dependency crowdstrike-falconpy to v1.4.5 by @renovate in #2456
• Update dependency google-auth to v2.33.0 by @renovate in #2461
• Update dependency PyYAML to v6.0.2 by @renovate in #2462

New Contributors:

• @obideuce made their first contribution in #2445

Full Changelog: 6.2.11...6.2.12

Version 6.2.11

Bug Fixes:

• #2435 [Hygiene] Hygiene enrichment connector error

Pull Requests:

• [Comlaude] change Identity import and utcnow by @yassine-ouaamou in #2440
• [Hygiene] Hygiene enrichment connector error by @romain-filigran in #2438
• Update dependency greynoise to v2.3.0 by @renovate in #2439

Full Changelog: 6.2.10...6.2.11

Version 6.2.10

Bug Fixes:

• #2437 [Mandiant] Campaigns import is broken

Pull Requests:

• [Mandiant] Fix argument method extract mandiant name by @helene-nguyen in #2436

Full Changelog: 6.2.9...6.2.10

Version 6.2.9

Enhancements:

• #2424 [MISP] Include aliases when searching for threats from tags
• #2420 [Mandiant] Campaign improvements
• #2419 [Shodan InternetDB] Playbook compatibility
• #2397 [Google DNS] Make the Google DNS enrichment connector “playbook compatible”
• #1118 [CROWDSTRIKE] TLS Negotation issues on Alpine 3.17 (OpenSSL 3.0) UNSAFE_LEGACY_RENEGOTIATION_DISABLED

Bug Fixes:

• #2276 Malpedia

Pull Requests:

• Update opencti/connector-cisco-sma Docker tag to v6.2.8 by @renovate in #2413
• Update dependency boto3 to v1.34.150 by @renovate in #2414
• [Malpedia] Fix missing description for intrusion set by @Megafredo in #2415
• [Google DNS] Make the connector 'playbook compatible' by @Megafredo in #2417
• Update dependency boto3 to v1.34.151 by @renovate in #2426
• Update dependency google-api-python-client to v2.139.0 by @renovate in #2423
• [MISP] search for threats in aliases when guess_threats_from_tags is ON by @yassine-ouaamou in #2425
• [Shodan InternetDB] Playbook compatibility by @romain-filigran in #2428
• Update dependency pycti to v6.2.8 by @renovate in #2430
• Update dependency vt-py to v0.18.3 - autoclosed by @renovate in #2431
• Update opencti/connector-shodan-internetdb Docker tag to v6.2.8 by @renovate in #2432
• [Mandiant] Improvement of campaign imports by @helene-nguyen in #2422

Full Changelog: 6.2.8...6.2.9

Version 6.2.8

Enhancements:

• #2404 [Cisco SMA] Creation of the Cisco SMA connector
• #1531 Removing default labelling of connectors
• #963 Add Shodan Search Feature
• #595 [VirusTotal] Add an option to disable labels

Bug Fixes:

• #2389 [Misp] Error outside the main connector process is not logged
• #2214 Error 'standard_id' when using the export-file-stix connector v6.1.10 on a report that contains nested relationships
• #1567 Shodan connector error

Pull Requests:

• Update dependency boto3 to v1.34.148 by @renovate in #2376
• Update dependency pytest to v8.3.2 by @renovate in #2379
• New connector : Cisco SMA by @Lhorus6 in #2406
• Update dependency regex to v2024.7.24 by @renovate in #2402
• Update dependency pydantic_core to v2.20.1 by @renovate in #2401
• [red-flag-domains] Update red-flag-domains docker-compose.yml by @sda06407 in #2405
• Updated exception handling & code quality in external-import template by @Obdam in #2400
• [Misp] Fix indent + add traceback for logs outside connector main process by @helene-nguyen in #2388
• Update dependency google-api-python-client to v2.138.0 by @renovate in #2407
• Update dependency boto3 to v1.34.149 by @renovate in #2408
• Fix path error by @Lhorus6 in #2411
• Update dependency reversinglabs-sdk-py3 to v2.6.4 by @renovate in #2410
• Update dependency pycti to v6.2.7 by @renovate in #2409
• [RSTCLOUD] July Bugfixes and Improvements by @k1r10n in #2380
• fixes Comlaude by @yassine-ouaamou in #2279
• Update dependency stix-shifter to v7.0.11 by @renovate in #2412

New Contributors:

• @sda06407 made their first contribution in #2405
• @Obdam made their first contribution in #2400

Full Changelog: 6.2.7...6.2.8

Version 6.2.7

Bug Fixes:

• #2383 [Ironnet] Fix import
• #2378 [urlscan-enrichment] API key error lead to cryptic error messages
• #2374 [splunk] Connection errors are not logged
• #2372 [Mandiant] Connectors exceptions are not logged (only "Terminated")
• #2357 [Cape sandbox] Analysis failing due to incompatable attributes
• #2320 [Sentinel] - Indicator updates are not propagated in Azure Sentinel

Pull Requests:

• [Mandiant] Add log when exception is caught outside of running connector process by @helene-nguyen in #2371
• [import-document] added new exact_match_fields in configuration by @JeremyCloarec in #2335
• [connector] Urlscan, fix Api key error message by @Megafredo in #2382
• [Webhook] Init connector by @Renizmy in #2193
• [Splunk] Add traceback to have more accurate logs by @helene-nguyen in #2381
• [Ironnet] Fix error on running connector by @helene-nguyen in #2384
• [opencti] Fix interval bug by @daemitus in #2353
• Fix for mistake in indent. by @piolug93 in #2377
• [Webhook] Fix circle ci configuration file for more consistency by @helene-nguyen in #2385
• [Webhook] Update version to fix CI build by @helene-nguyen in #2386
• [external-import] ESET connectors TAXII2 and MISP by @polakovicp in #2343
• [Sentinel] - Indicator updates are not propagated in Azure Sentinel by @romain-filigran in #2347
• [cape-sandbox]: Fix, error updating some "File" observable properties by @romain-filigran in #2361

New Contributors:

• @piolug93 made their first contribution in #2377
• @polakovicp made their first contribution in #2343

Full Changelog: 6.2.6...6.2.7

Version 6.2.6

Bug Fixes:

• #2360 [Flashpoint] Alerts on communities are not ingested properly
• #2355 [Cape Sandbox] Cape URL variable not being utilised
• #2349 [Recorded Future Enrichment] Add score on Indicator

Pull Requests:

• [Recorded Future Enrichment] Add score in the correct field by @helene-nguyen in #2350
• Update dependency validators to v0.33.0 by @renovate in #2348
• Update opencti/connector-infoblox Docker tag to v6.2.5 by @renovate in #2352
• [cape-sandbox] - fix docker-compose.yml template by @romain-filigran in #2356
• Update dependency reversinglabs-sdk-py3 to v2.6.3 by @renovate in #2363

New Contributors:

• @romain-filigran made their first contribution in #2356

Full Changelog: 6.2.5...6.2.6

Version 6.2.5

Enhancements:

• #2307 [CrowdStrike] Be able to exclude IOCs during import based on labels applied to them

Bug fixes:

• #2333 [infoblox] Connector fails to start with 'datetime.datetime' has no attribute 'datetime'
• #2334 [mandiant] In some cases, relationships are not created in reports

Pull Requests:

• Update dependency validators to v0.32.0 by @renovate in #2324
• Update dependency boto3 to v1.34.143 by @renovate in #2329
• [infoblox] Add to CI/CD by @SamuelHassine in #2331
• [connector] Fix mandiant relationships by @helene-nguyen in #2332
• Add possibility to exclude IOCs import based on labels by @Lhorus6 in #2308
• Fix the import of library by @Lhorus6 in #2336
• Fix KeyError on dict by @Lhorus6 in #2340
• [flashpoint] Create groupings instead of reports by default by @SamuelHassine in #2342
• [Flashpoint] Fix lint Flashpoint by @helene-nguyen in #2344
• Update dependency stix-shifter to v7.0.11 by @renovate in #2338
• Update dependency stix-shifter-modules-splunk to v7.0.11 by @renovate in #2339
• Update dependency boto3 to v1.34.144 by @renovate in #2346
• Update dependency stix-shifter-utils to v7.0.11 by @renovate in #2345

Full Changelog: 6.2.4...6.2.5